Make Cockpit first-class optional v1 product

[smota]

Summary

Makes Cockpit a first-class AgentFlow SDLC v1 product component while preserving runtime optionality.

Implemented issues

Implements #178
Refs #163

Related issues

This completes the v1 recommendation that Cockpit be optional at runtime but fully integrated into product strategy, package gates, CLI discovery, docs, and release validation.

Workflow evidence

Workflow-status comment: exception: PR body records role-pass evidence for this v1 hardening slice.

Handover comments: exception: current session owns implementation through validation and PR creation.

Role-pass summary:

• Council reconvened: Claude, AGY, Codex. Consensus: Cockpit must be optional at runtime, but first-class in product artifact and release gates.
• Product decision: Cockpit is the official optional Goal Command Center; CLI/GitHub remain authoritative, Cockpit owns no unique state, and normal SDLC commands do not require a running service.
• Implementation: added agentflow-sdlc cockpit and agentflow-sdlc cockpit doctor, Cockpit package path asset resolution, Cockpit smoke gate, npm/package required-file gates, docs/README/SDLC definition integration, skill/adapters discoverability, and release gate inclusion.

Validation evidence:

• pnpm validate:release passed.
• pnpm test passed: 23 files / 147 tests.
• node scripts/sdlc-sandbox-smoke.mjs passed.
• node scripts/cockpit-smoke.mjs passed: /healthz 200 and asset 200.
• node scripts/validate-npm-package.mjs passed.
• AGENTFLOW_REPOSITORIES=smota/agentflow-sdlc node bin/cli.mjs cockpit doctor --json passed.
• npm pack --dry-run --json passed and includes Cockpit docs/server/assets via manifest gates.

Agent review

• Implemented by: pi
• Launcher: pi
• Executor: pi-parent
• Transport: local-cli
• Delegation boundary: current-session
• Model / runtime: gpt-5.5 / pi
• Review: self-review
• Workflow profile: standard
• Merge owner: human/operator
• Mode: single-agent
• Self-review disclosure: Same Pi session implemented and reviewed; recommendations were based on council findings and validated with command-backed release gates.

CI-equivalent validation

• Status: passed
  Commands:
• pnpm validate:release
• pnpm test
• node scripts/sdlc-sandbox-smoke.mjs
• node scripts/cockpit-smoke.mjs
• node scripts/validate-npm-package.mjs
• AGENTFLOW_REPOSITORIES=smota/agentflow-sdlc node bin/cli.mjs cockpit doctor --json
• npm pack --dry-run --json

Follow-up issues

None required for this v1 scope.

Out of scope

• Making Cockpit required by init, sync, doctor, validators, skills, plugins, or settings.
• Auto-starting a background server.
• Requiring OAuth, GitHub tokens, Docker, hosted accounts, databases, queues, or write actions by default.
• Production-hardening write actions beyond existing explicit opt-in gate.