docs(SHR-WP-0001): complete T06 gates and finish foundation workplan

Add baseline evidence (2026-08-09) and executable retirement gates mapped to
GOAL.md. Mark all foundation tasks done and workplan finished; next work is
child implementation streams.

evidence/baseline-2026-08-09.yaml

@@ -0,0 +1,101 @@
+# SHR-EVID-BASELINE-0001 — State Hub migration baseline (orientation + gate inputs)
+# Captured during SHR-WP-0001-T06. Re-capture before each major cutover slice.
+
+id: SHR-EVID-BASELINE-0001
+captured_at: "2026-08-09T19:45:00Z"
+source: "GET http://127.0.0.1:8000/state/summary + selective REST"
+state_hub_git_rev: "462f4a4"
+cluster_access: "ops-bridge state-hub-primary → 127.0.0.1:8000"
+health:
+  status: ok
+  db: connected
+
+coordination_totals:
+  topics:
+    total: 14
+    active: 14
+  workplans:
+    total: 887
+    proposed: 14
+    ready: 6
+    active: 8
+    blocked: 2
+    backlog: 7
+    finished: 806
+    archived: 44
+  tasks:
+    total: 5222
+    wait: 8
+    todo: 146
+    progress: 8
+    done: 4815
+    cancel: 245
+  decisions:
+    total: 89
+    open: 0
+    resolved: 87
+    escalated: 0
+    superseded: 2
+
+registry_counts:
+  domains: 14
+  managed_repos: 105
+
+api_surface:
+  openapi_path_count: 135
+  # inventory route extract (static) may differ slightly from live OpenAPI
+  inventory_route_items: 187
+  inventory_mcp_tools: 88
+  inventory_datasets: 42
+  inventory_dashboard_pages: 39
+  inventory_migrations: 43
+  inventory_total_items: 425
+
+disposition_snapshot:
+  move: 269
+  replace: 66
+  keep: 48
+  retire: 42
+
+known_callers:
+  - id: agents-mcp
+    path: "MCP SSE :8001 / remote :18001"
+  - id: dashboard-observable
+    path: "state-hub/dashboard"
+  - id: activity-core
+    path: "sweeps, sinks, context resolvers"
+  - id: fix-consistency-cli
+    path: "statehub fix-consistency"
+  - id: custodian-register
+    path: "statehub register / custodian_cli"
+  - id: remote-workers
+    path: "tunnel :18000/:18001"
+  - id: ops-bridge
+    path: "private access only"
+  notes: "Detail inventory: inventory/jobs-callers-ops.yaml and state-hub/docs/evidence/workstream-caller-inventory-20260709.md"
+
+availability_expectations:
+  operator_primary: "http://127.0.0.1:8000 via ops-bridge"
+  remote_agents: "http://127.0.0.1:18000 API, :18001 MCP"
+  public_exposure: none
+  local_fallback: "WSL2 make api + docker postgres (rollback only)"
+
+recovery_paths:
+  backup_current:
+    - "Manual CNPG pg_dump (scheduled backups not yet configured — see cluster-operating-model.md)"
+    - "WSL2 docker postgres dump path for rollback drills"
+  restore:
+    - "Restore into isolated DB; compare counts; then cut traffic"
+  rollback:
+    - "bridge down state-hub-primary && local make api (documented fallback)"
+    - "Retain prior image tag / dump until rollback expiry (set per cutover)"
+  historical_query:
+    - "Git workplan files remain authority for work records"
+    - "Final DB dump + archived state-hub repo for non-file projections"
+
+full_table_rowcounts:
+  status: deferred_to_cutover_slices
+  note: >
+    Per-table SELECT counts should be captured in STATE-WP-0079 / owner WPs
+    immediately before each data handoff. This baseline locks coordination
+    totals and surface inventory for T06 gate definitions.