feat: add scoped identifier registrar

AGENTS.md

@@ -120,6 +120,16 @@ curl -s -X PATCH "http://127.0.0.1:8000/tasks/<task_id>" \
    ```
    Coding agents should run this directly; ask the operator only if the CLI or
    State Hub API is unavailable. This syncs task status from files into the hub DB.
+   If C-06/C-11 says this host is not the identifier registrar, do not retry
+   and do not set `STATEHUB_REGISTRAR` yourself. Use the governed, single-repo
+   fallback once the branch is clean and synchronized:
+   ```bash
+   uv run --project ~/repo-manager rmgr registrar-reconcile \
+     --path . --confirm-primary --push
+   ```
+   If that command is unavailable, send one registrar request to `repo-manager`
+   naming the repository and missing canonical ids, then continue file-backed
+   work without UUIDs.
 
 ---
 
@@ -204,5 +214,7 @@ not a kind. Fleet list lives on State Hub, not in `SCOPE.md`.
 
 To create a new workplan:
 1. Write the file following the format above
-2. Run `statehub fix-consistency` locally; ask the operator only if the CLI or
-   State Hub API is unavailable.
+2. Run `statehub fix-consistency` locally.
+3. On a non-registrar C-06/C-11 skip, invoke `rmgr registrar-reconcile` once as
+   documented in the session-close protocol. Never set the registrar environment
+   variable directly and never send repeated requests for the same ids.