fix(validate-a2ml): exempt canonical typed manifests + *file.a2ml from identity check (#8)

The identity check (`agent-id`/`name`/`project`) is appropriate for
manifests that genuinely declare a subject, but two families of A2ML files
carry identity by convention rather than by in-file field:

1. **Canonical typed manifests under `.machine_readable/6a2/`** —
   `AGENTIC.a2ml`, `META.a2ml`, `NEUROSYM.a2ml`, `PLAYBOOK.a2ml`.
   These hold typed *aspects* of the enclosing project (agent permissions,
   metadata, neurosymbolic invariants, playbook recipes). Identity is the
   parent directory; the filename indicates the aspect. Sibling files
   `ECOSYSTEM.a2ml` and `STATE.a2ml` already declare `[project] name`
   or `[metadata] project` and continue to be validated normally.

2. **Dockerfile-style top-level typed manifests** — `Intentfile.a2ml`,
   `Trustfile.a2ml`, etc. These use markdown-flavoured A2ML
   (`@abstract:` blocks, `## headers`) rather than TOML-style fields,
   so the identity-field regex cannot match by construction. Identity is
   the parent repo, exactly as with a `Dockerfile` or `Makefile`.

Adds both patterns to the existing `*AI-MANIFEST*` exemption. The check
remains active for any other `*.a2ml` filename, so genuinely-missing-
identity bugs are still surfaced.

Without this, `Validate A2ML manifests` reports 40+ errors across every
estate consumer that ships a complete 6a2 manifest set.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Author: hyperpolymath

validate-a2ml.sh

@@ -145,6 +145,21 @@ validate_a2ml() {
     if [[ "$basename" == *"AI-MANIFEST"* ]]; then
         is_manifest=true
     fi
+    # Canonical typed manifests under .machine_readable/6a2/ — identity comes
+    # from the enclosing directory + filename, not an in-file field. Sibling
+    # files in the same directory (ECOSYSTEM.a2ml, STATE.a2ml) DO carry their
+    # own 
+ame/project and continue to be validated normally.
+    case "$basename" in
+        AGENTIC.a2ml|META.a2ml|NEUROSYM.a2ml|PLAYBOOK.a2ml)
+            is_manifest=true
+            ;;
+        # Dockerfile-style top-level typed manifests (Intentfile, Trustfile, …)
+        # use markdown-flavoured A2ML; identity is carried by the parent repo.
+        *file.a2ml)
+            is_manifest=true
+            ;;
+    esac
 
     # Contractile-shape A2ML files use `@directive:` syntax instead of
     # TOML `key = value`. Trustfile.a2ml, Intentfile.a2ml, Mustfile.a2ml,