Record the FIN-WP-0007 split after checking resource-control: they keep
intelligence resource identity and provision-level class I metering;
session tokens stay with State Hub; work-effectiveness is a reporting
join. Missing token counts are now unknown, not zero.
Add create_runway_router() following the hub-core factory pattern,
expose GET /runway/summary and /runway/monthly-burn via create_app,
and add finhub serve for local operation.
Link the DB-first onboarding workstream to FIN-WP-0000-repo-integration.md,
finish agent orientation (rules stubs, remove first-session), add repo
classification, and close all four custodian onboarding tasks.
