Complete Phase 1: policy kernel, REST service, and local smoke tooling

Implements QONTO-WP-0002 (policy-gated Qonto REST service with audit
logging, rate limiting, and credential handling) and the ADHOC-2026-07-21
follow-up (fixture-backed local smoke mode, repo classification metadata).
Marks QONTO-WP-0001/0002 and the ad-hoc workplan finished, and regenerates
WORK-RECORDS.md and the ADHOC workplan's state_hub_workstream_id via
fix-consistency.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

.repo-classification.yaml

@@ -0,0 +1,26 @@
+repo_classification:
+  standard: Repo Classification Standard
+  version: '1.0'
+  classified_at: '2026-07-21'
+  classified_by: agent
+  category: tooling
+  domain: infotech
+  secondary_domains:
+  - financials
+  - agents
+  capability_tags:
+  - finance
+  - governance
+  - automation
+  - api
+  - observability
+  business_stake:
+  - technology
+  - operations
+  - finance
+  - automation
+  business_mechanics:
+  - control
+  - coordination
+  - operation
+  notes: Governed Qonto domain service for read-only finance awareness across agent harnesses.