v1 critical chain plan (G0–G6) + fix Node install path in mcp-bridge (#211)

## What this is

A full-system "review and rethink" of boj-server + boj-server-cartridges
as a **product** heading for v1 — proofs, seams, UX/UI, and the
social/open-source dimension — with stapeln, http-capability-gateway,
hybrid-automation-router, consent-aware-http (standards), verisimdb,
vcl-ut, and echo-types assessed for border-crossing value.

Two commits:

### 1. `fix(mcp-bridge)`: restore the Node/npx install path

`nickel-validator.js` called `Deno.env.get()` / `Deno.pid` directly, so
importing `dispatcher.js` under Node threw at module load — i.e. **the
`npx -y @hyperpolymath/boj-server@latest` path advertised in every
README quickstart was broken**. Routed through the existing `runtime.js`
abstraction (new portable `pid` export). `node --test mcp-bridge/tests/`
goes 26/27 → **52/52**.

Root cause of the regression class: no CI workflow runs the bridge's own
unit tests (only the path-claims bench script). The plan recommends a
{Node, Deno} matrix job (§7 E5).

### 2. `docs(planning)`:
`docs/planning/v1-critical-chain-2026-06-11.adoc`

The ordering layer over the existing issues/ADRs (#197–#202, #186, #188,
#87, cartridges#36/#37/#41, ADR-0004/0008/0016), not new scope.
Headlines:

- **Verdict**: BoJ has inverted the usual failure mode — exceptional
proofs/governance/tooling, and (per the 2026-06-05 audit) exactly **one
verified-real cartridge**. The chain is "grow the truth to meet the
claims" via the Foundry, gated by the truthfulness probe.
- **Gates G0–G6** with binary exit tests: truthful baseline (done) →
installs everywhere → Golden Dozen real → safe to expose (HCG D/E = the
auth gate) → operators onboard (signed .ctp releases, covenant) →
community builds (Foundry as headline feature, tier vocabulary
reconciled) → v1.0.0.
- **Explicit v1 cuts**: load-aware routing deferred; RGTV post-v1 (keyed
cartridges stay local — privacy by construction); marketplace tooling
post-v1; HAR post-v1 (scaffold maturity); tray/PanLL panel experimental.
- **Social programme as release work**: operator covenant, contributor
ladder (bus-factor), launch sequence, consent-aware declaration (AIBDP
manifest, HTTP 430 reserved).
- **Reconciliation list**: count drift (115/125/139), tier-semantics
divergence between repos, ROADMAP "Matrix Fill ✓" vs
`cartridges-available-real = 1`, FUTURE_PLANS.adoc boilerplate,
license/version drift, GEMINI.md contradiction.
- **Five next actions**, one session each, starting with a single ≤2h
owner decision batch.

## Review notes

- Plan only, per directive — the one code change is the mini-test fix
the directive invited.
- The Golden Dozen slate (§3 A2) and the owner decision batch (§13) are
the two places needing your input before anything downstream moves.

https://claude.ai/code/session_01PRi6uSn6qucCMCCy7mqUr4

---
_Generated by [Claude
Code](https://claude.ai/code/session_01PRi6uSn6qucCMCCy7mqUr4)_

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath