docs(OGAR): consumer best-practices guide + classid-is-address precision

Two coupled sharpenings of the consumer-side doctrine, born from cross-
session corroboration on the GUID layout question:

1) New OGAR-CONSUMER-BEST-PRACTICES.md — the muscle-memory guide.
   Pattern-centric, example-heavy. Drilled with worked classid values
   across every consumer (medcare 0x0005_0901, woa 0x0003_0103, smb
   0x0004_0204, odoo 0x0002_0103, openproject 0x0001_0102, redmine
   0x0007_0102, the 5-way BILLABLE_WORK_ENTRY convergence pin):

   §0 the one-line invariant + three drilled corollaries
   §1 address anatomy with concrete hi/lo examples + APP allocation
      table + domain byte table
   §2 the four canonical patterns:
      Pattern 1 — pull classid (Port::class_id)
      Pattern 2 — compose render classid (APP_PREFIX | concept)
      Pattern 3 — authorize by classid (interim until keystone)
      Pattern 4 — distill/migrate from legacy bridge (4a one-line
                  import repoint; 4b full structural drop)
      Each pattern shown with ✅ canonical + ❌ anti shapes.
   §3 anti-pattern catalogue paired with right-shape references
   §4 worked migration narrative — Medcare patient end-to-end
   §5 activation triggers + agents that load Tier-1
   §6 cross-refs (incl. lance-graph #591 parallel-session sibling)

2) SURREAL-AST-TRAP-PREFLIGHT.md §0 — sharpens the spellbook with the
   precision from lance-graph #591: "the classid is pure address; the
   magic is what it resolves to." Explains why the trap is structurally
   impossible to fix from inside DDL — SurrealQL has the address but
   not the Core types behavior resolves to, so encoding lifecycle in
   DEFINE EVENT is putting the value into the key. Cross-link to best-
   practices guide added to §Cross-refs.

3) CLAUDE.md — registered best-practices guide as doc-family #8; added
   matching non-negotiable ("Consumer call sites: classid is address,
   magic is at the resolution target") under the existing SurrealQL
   non-negotiable.

4) APP-CLASS-CODEBOOK-LAYOUT.md — top-of-doc cross-ref to the new
   muscle-memory guide; reinforces hi-u16 = render magic ≠ class magic
   distinction.

Companions to lance-graph #591 (parallel session's
`.claude/knowledge/ogar-consumer-preflight.md` + ISS-CONTRACT-APP-
PREFIX-MIRROR Core-gap entry) — same spellbook pattern, cast in two
domains. Two independent sessions converging on the address-vs-magic
precision is the muscle the two docs together drill across every
future consumer-side session.

Doc-only PR; no code touched.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EYvNjD8M8LMNYbRy3gq2FP

Author: claude

CLAUDE.md

@@ -189,6 +189,15 @@ alignment costs. Until measured: 3×4 stands.
    Operational pre-flight: `docs/SURREAL-AST-TRAP-PREFLIGHT.md` (the
    spellbook — five questions, 90 seconds, MANDATORY before any
    producer→IR / transcode / codegen / `.surql` authoring session).
+8. `docs/OGAR-CONSUMER-BEST-PRACTICES.md` — the muscle-memory guide
+   for every consumer-side session (medcare-rs, woa-rs, smb-office-rs,
+   odoo-rs, openproject-nexgen-rs, q2). One-line invariant: **the
+   classid is pure address; the magic is what it resolves to.** Drilled
+   with worked examples across every PortSpec, the four canonical
+   patterns (pull classid · compose render · authorize · migrate), and
+   an anti-pattern catalogue paired with the right shapes. MANDATORY
+   before authoring any consumer call site that mentions `class_id`,
+   `APP_PREFIX`, `PortSpec`, `ClassView`, or any `*Bridge`/`UnifiedBridge`.
 8. `docs/ARCHITECTURAL-DECISIONS-2026-06-04.md` — ADR-001..025
    (ADR-026 pending).
 9. `.claude/agents/` — the 5+3 hardening pattern (5 research savants +
@@ -207,6 +216,15 @@ alignment costs. Until measured: 3×4 stands.
   … THEN …` carrying lifecycle is the "negative-beauty hijack"
   `SURREAL-AST-AS-ADAPTER.md` §0 rejects. Behavior flows producer →
   OGAR `Class`+`ActionDef` → adapter; never producer → DDL.
+- **Consumer call sites: classid is address, magic is at the
+  resolution target:** before authoring consumer code that pulls a
+  classid, composes a render address, authorizes, or migrates off a
+  bridge, read `docs/OGAR-CONSUMER-BEST-PRACTICES.md` (the muscle-
+  memory guide). The hi u16 chooses **render** skin (per-app
+  ClassView/template), the lo u16 names the **shared concept** (RBAC +
+  ontology); **neither half carries behavior** — class-magic
+  (`ActionDef`+`KausalSpec`) is a property of the Core node the
+  address resolves to, never of the address.
 - **PII:** never emit German PII labels (medcare-rs leaf-rename at the
   adapter is the guarantee). Word-boundary abort-guard before commit.
 - **No model identifier** in any committed artifact (chat only).

docs/APP-CLASS-CODEBOOK-LAYOUT.md

@@ -9,6 +9,13 @@
 > prefix** and pins the rule that keeps "classid is shared currency"
 > intact.
 >
+> **Read together with** `docs/OGAR-CONSUMER-BEST-PRACTICES.md` — the
+> muscle-memory guide with worked examples across every consumer. **The
+> classid is pure address (both halves)**; behavior lives at the
+> resolution target (ClassView for the skin / `Class`+`ActionDef` for
+> the canonical shape and magic). Hi u16 selects **render** magic, NOT
+> class magic; class magic is the Core's, never the address's.
+>
 > **The goal it serves (§3.5–3.7):** every renderable thing — strings,
 > text, media, online sources — is rendered by **key-value resolution**
 > against typed content stores, so **no serialization exists in the hot