feat: complete local layer model v0.7 conformance work

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06eaf-3425-7f92-a0c2-bb4aa4faebe4

tests/test_routing.py

@@ -143,6 +143,18 @@ def test_route_find_vault_token_ops_warden_prefers_broker_lane():
     assert matches[0].id == "ops-warden-warden-sign-token"
 
 
+def test_route_find_layer_declaration_resolves_to_reference_playbook():
+    catalog = load_catalog(_repo_catalog())
+    entry = catalog.find("how do I declare my layer", limit=1)[0]
+    assert entry.id == "netkingdom-layer-declaration"
+    assert entry.owner_repo == "ops-warden"
+    assert entry.wiki_ref.endswith(
+        "netkingdom-layer-declaration.md#worker-checklist"
+    )
+    assert entry.canon_ref.endswith("security-layer-model_v0.7.md")
+    assert entry.exec_capable is False
+
+
 def test_whynot_design_npm_lane_is_concrete_and_resolvable():
     """The provisioned Forgejo npm lane is exact, concrete, and resolvable."""
     catalog = load_catalog(_repo_catalog())