refactor(root): move root artefacts to their canonical locations

Applies the estate root-shape rollout: files that are not root-level by
necessity move to where their tooling and the estate canon expect them, and
every reference to them is updated in the same change.

  * .github/hooks/validate-a2ml.sh
      (from .githooks/validate-a2ml.sh)
      ->   .github/hooks/validate-a2ml.sh
  * .github/hooks/validate-k9.sh
      (from .githooks/validate-k9.sh)
      ->   .github/hooks/validate-k9.sh
  * .github/workflows/dogfood-gate.yml
  * RSR_OUTLINE.adoc
  * build/guix.scm
      (from guix.scm)
      ->   build/guix.scm
  * .github/CONTRIBUTING.md
      (new)
  * CONTRIBUTING.adoc
      (deleted)
  * ROADMAP.adoc

Verified with `git apply --check` against current main before committing; no
behaviour change intended, the Justfile entry points keep working.

Author: hyperpolymath

.github/CONTRIBUTING.md

@@ -0,0 +1,103 @@
+# Clone the repository
+
+git clone <https://github.com/hyperpolymath/cloud-sync-tuner.git> cd
+cloud-sync-tuner
+
+# Using Guix (recommended for reproducibility)
+
+guix develop
+
+# Or using toolbox/distrobox
+
+toolbox create cloud-sync-tuner-dev toolbox enter cloud-sync-tuner-dev
+\# Install dependencies manually
+
+# Verify setup
+
+just check \# or: cargo check / mix compile / etc. just test \# Run test
+suite
+
+
+    ### Repository Structure
+
+cloud-sync-tuner/ ├── src/ \# Source code (Perimeter 1-2) ├── lib/ \#
+Library code (Perimeter 1-2) ├── extensions/ \# Extensions (Perimeter 2)
+├── plugins/ \# Plugins (Perimeter 2) ├── tools/ \# Tooling (Perimeter
+2) ├── docs/ \# Documentation (Perimeter 3) │ ├── architecture/ \# ADRs,
+specs (Perimeter 2) │ └── proposals/ \# RFCs (Perimeter 3) ├── examples/
+\# Examples (Perimeter 3) ├── spec/ \# Spec tests (Perimeter 3) ├──
+tests/ \# Test suite (Perimeter 2-3) ├── .well-known/ \# Protocol files
+(Perimeter 1-3) ├── .github/ \# GitHub config (Perimeter 1) │ ├──
+ISSUE_TEMPLATE/ │ └── workflows/ ├── CHANGELOG.md ├── CODE_OF_CONDUCT.md
+├── CONTRIBUTING.md \# This file ├── GOVERNANCE.md ├── LICENSE ├──
+MAINTAINERS.md ├── README.adoc ├── SECURITY.md ├── flake.guix \# Guix
+flake (Perimeter 1) └── Justfile \# Task runner (Perimeter 1)
+
+
+    ---
+
+    ## How to Contribute
+
+    ### Reporting Bugs
+
+    **Before reporting**:
+    1. Search existing issues
+    2. Check if it's already fixed in `main`
+    3. Determine which perimeter the bug affects
+
+    **When reporting**:
+
+    Use the [bug report template](.github/ISSUE_TEMPLATE/bug_report.md) and include:
+
+    - Clear, descriptive title
+    - Environment details (OS, versions, toolchain)
+    - Steps to reproduce
+    - Expected vs actual behaviour
+    - Logs, screenshots, or minimal reproduction
+
+    ### Suggesting Features
+
+    **Before suggesting**:
+    1. Check the [roadmap](ROADMAP.md) if available
+    2. Search existing issues and discussions
+    3. Consider which perimeter the feature belongs to
+
+    **When suggesting**:
+
+    Use the [feature request template](.github/ISSUE_TEMPLATE/feature_request.md) and include:
+
+    - Problem statement (what pain point does this solve?)
+    - Proposed solution
+    - Alternatives considered
+    - Which perimeter this affects
+
+    ### Your First Contribution
+
+    Look for issues labelled:
+
+    - [`good first issue`](https://github.com/hyperpolymath/cloud-sync-tuner/labels/good%20first%20issue) — Simple Perimeter 3 tasks
+    - [`help wanted`](https://github.com/hyperpolymath/cloud-sync-tuner/labels/help%20wanted) — Community help needed
+    - [`documentation`](https://github.com/hyperpolymath/cloud-sync-tuner/labels/documentation) — Docs improvements
+    - [`perimeter-3`](https://github.com/hyperpolymath/cloud-sync-tuner/labels/perimeter-3) — Community sandbox scope
+
+    ---
+
+    ## Development Workflow
+
+    ### Branch Naming
+
+docs/short-description \# Documentation (P3) test/what-added \# Test
+additions (P3) feat/short-description \# New features (P2)
+fix/issue-number-description \# Bug fixes (P2) refactor/what-changed \#
+Code improvements (P2) security/what-fixed \# Security fixes (P1-2)
+
+
+    ### Commit Messages
+
+    We follow [Conventional Commits](https://www.conventionalcommits.org/):
+
+():
+
+\[optional body\]
+
+\[optional footer\]

.githooks/validate-a2ml.sh .github/hooks/validate-a2ml.sh.githooks/validate-a2ml.sh renamed to .github/hooks/validate-a2ml.sh

@@ -38,7 +38,7 @@ jobs:
 
       - name: Validate A2ML manifests
         if: steps.detect.outputs.count > 0
-        run: bash .githooks/validate-a2ml.sh
+        run: bash .github/hooks/validate-a2ml.sh
       - name: Write summary
         run: |
           A2ML_COUNT="${{ steps.detect.outputs.count }}"
@@ -82,7 +82,7 @@ jobs:
 
       - name: Validate K9 contracts
         if: steps.detect.outputs.k9_count > 0
-        run: bash .githooks/validate-k9.sh
+        run: bash .github/hooks/validate-k9.sh
       - name: Write summary
         run: |
           K9_COUNT="${{ steps.detect.outputs.k9_count }}"

.githooks/validate-k9.sh .github/hooks/validate-k9.sh.githooks/validate-k9.sh renamed to .github/hooks/validate-k9.sh

@@ -189,7 +189,7 @@ A secure, cross-platform cloud synchronization system with:
 
 == Contributing
 
-See link:CONTRIBUTING.adoc[CONTRIBUTING.adoc] for how to help with roadmap items.
+See link:.github/CONTRIBUTING.md[.github/CONTRIBUTING.md] for how to help with roadmap items.
 
 Priority areas:
 

.github/workflows/dogfood-gate.yml

@@ -35,7 +35,7 @@ git init
 sed -i 's/RSR-template-repo/my-project/g' Justfile guix.scm README.adoc
 
 # Enter development environment
-guix shell -D -f guix.scm
+guix shell -D -f build/guix.scm
 
 # Validate compliance
 just validate-rsr