Sync AGENTS.md, CLAUDE.md, and .claude/rules from updated project_rules templates: workplan-first session protocol, legacy terminology footnote, and GET /workplans/ examples.
Inline ops-warden CredentialRouting canon into AGENTS.md and mirror it as a Claude Code rule so agents route secret and access requests correctly.