Reorg step 1: consolidate repo under core/, drop the mafiabot label

Mechanical structure-only pass (no document/guide content edits):

- Move src/ichor, src/endocrine, and docs/ into core/; the old top-level
  mafiabot_core/ becomes core/. Everything now lives under a single core/ root.
- Drop the "mafiabot" label from the Ada/Alire crate: core.gpr (project Core),
  alire.toml name = "core"; the generated *_config.* regenerate as core_config.*.
- Repoint build-critical wiring only:
  - .claude/skills/run-sica-fondt/smoke.sh (ponyc + Ada + COBOL paths)
  - core/src/endocrine R source()/runner paths and the test glob
  - .github/workflows/ci.yml (working-directory + gpr name)

Verified green: smoke ALL GREEN (Pony Ichor, Ada core crate + tests, COBOL E1
vault); R endocrine 14/0; Octave ETR 26/0/1.

Deferred (reserved for a less-ephemeral doc/guide pass): docmap.yaml, the guide
files and nested AGENTS.md/README prose + now-stale relative links, SOUL.md, and
the deeper ring/storage restructure.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015hmgREHNsxYCuim33yUF2c

core/AGENTS.md

@@ -0,0 +1,43 @@
+# AGENTS.md — Ada border (D1) + invariant vault
+
+Local guide for `mafiabot_core`. Repo-wide map and rules: [`../AGENTS.md`](../AGENTS.md);
+working agreements: [`../CLAUDE.md`](../CLAUDE.md).
+
+## What this is
+
+The **Ada/SPARK border — D1**. All traffic to the inner brain crosses here
+first. Built with **Alire**. Internal modules under `src/`: `trust` (incl. the
+COBOL invariant-law vault), `organs`, `network`, `protocol`, `daemons`, `core`,
+`types`, `payloads`. These are modules, not separate organs — they share this
+file.
+
+## Build & test
+
+Use **Alire**, not bare `gprbuild` (the project imports an Alire-generated
+config gpr):
+
+```bash
+cd mafiabot_core && alr -n build
+./bin/trust_tests && ./bin/config_tests && ./bin/engine_tests
+```
+
+`engine_tests` prints nothing on success (clean exit). Or run the whole repo
+via `.claude/skills/run-sica-fondt/smoke.sh`.
+
+## The COBOL invariant vault (`src/trust`)
+
+`src/trust/invariants-architecture.cobol` is **E1, the constitution** —
+Invariant 0 (the culpability anchor) and 01 (minimize harm). Compile/run free
+format:
+
+```bash
+cobc -x -free -o /tmp/inv src/trust/invariants-architecture.cobol && /tmp/inv
+```
+
+## Local invariants
+
+- **S1:** this is the border — never add a route that lets traffic reach the
+  inner brain without crossing here.
+- **S2:** never reclassify a message's provenance.
+- **S3:** the invariant vault is **immutable at runtime** — don't edit it
+  casually; it's the constitution, not config.