feat(catalog): configurable cartridges root + canonical schema + category field sweep (#158)

## Summary
Three changes that prepare boj-server to consume cartridges from the new
[`hyperpolymath/boj-server-cartridges`](https://github.com/hyperpolymath/boj-server-cartridges)
repository on demand instead of bundling them in-tree:

### 1. Configurable cartridges root
`elixir/lib/boj_rest/application.ex` gains a fallback chain:
```
Application env (:boj_rest, :cartridges_root)
  → BOJ_CARTRIDGES_PATH environment variable
  → default "./cartridges" (preserves historical bundled behaviour)
```
Operators wanting on-demand fetch set `BOJ_CARTRIDGES_PATH` to their
local cache (e.g. `~/.boj/cartridges/`) and arrange for tray to populate
it. No runtime change unless the env var is set.

### 2. Canonical schema mirror
`schemas/cartridge-v1.json` is replaced with a vendored copy of the
canonical schema filed as
[standards#200](hyperpolymath/standards#200) —
which expands the original `-mcp`-only `name` regex to admit the full
BoJ server-role taxonomy:
`(mcp|lsp|dap|bsp|debug|format|lint|build|nesy|agentic|fleet)`, and adds
`category`, `states`, `source` fields. `schemas/SCHEMA-MIRROR.md`
documents the mirror discipline + the pending SHA-pinning ceremony
(executes once standards#200 merges).

### 3. `category` field sweep on 125 cartridge manifests
The new schema makes `category` required. Mechanical sweep assigns:
- `"category": "template"` (1: gossamer-mcp)
- `"category": "cross-cutting"` (11: agent-mcp, claude-agents-power-mcp,
claude-ai-mcp, local-coord-mcp, model-router-mcp, nesy-mcp, ml-mcp,
fleet-mcp, boj-health, dap-mcp, bsp-mcp)
- `"category": "domain"` (113)

Matches the taxonomy ratified in [boj-server-cartridges
ADR-001](https://github.com/hyperpolymath/boj-server-cartridges/blob/main/docs/decisions/ADR-001-taxonomy.adoc).

## Deferred to follow-up PRs
- tray → boj-server-cartridges on-demand fetch wiring (tray has the
cartridge-source subscription concept already in `tray/src/main.rs` /
`server.rs`; needs default registry configured).
- `BojRest.Catalog` reload-without-restart.
- Strict SHA-pin of local schema mirror to a specific standards commit +
sha256 (pending standards#200 merge).

## Test plan
- [x] All 125 cartridge manifests gain `category` field at correct value
- [x] Schema admits all 11 canonical role suffixes
- [x] `BOJ_CARTRIDGES_PATH=/foo bin/boj-server` would read from `/foo`
(manual trace)
- [x] Default behaviour unchanged when neither Application env nor
BOJ_CARTRIDGES_PATH set
- [ ] CI green
- [ ] Validate all 125 manifests against the new schema (follow-up;
tooling TBD)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

cartridges/007-mcp/cartridge.json

@@ -33,8 +33,9 @@
     "graceful_degrade": true
   },
   "copyright": "Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>",
-  "description": "007 agent meta-language cartridge — exposes the full oo7 CLI surface (parse/run/trace/build/test/lint/verify/contractile verbs/canonical-proof-suite/groove/self-assess) plus on-enter and on-exit lifecycle hooks that register the session as a coord peer, load the 6a2 methodology pack (STATE, META, ECOSYSTEM, AGENTIC, NEUROSYM, PLAYBOOK), and perform drift checks on exit.",
+  "description": "007 agent meta-language cartridge \u2014 exposes the full oo7 CLI surface (parse/run/trace/build/test/lint/verify/contractile verbs/canonical-proof-suite/groove/self-assess) plus on-enter and on-exit lifecycle hooks that register the session as a coord peer, load the 6a2 methodology pack (STATE, META, ECOSYSTEM, AGENTIC, NEUROSYM, PLAYBOOK), and perform drift checks on exit.",
   "domain": "dezig",
+  "category": "domain",
   "federation": "none",
   "memory_autolift": {
     "base_tags": [
@@ -58,7 +59,7 @@
   "tier": "Ayo",
   "tools": [
     {
-      "description": "Lifecycle hook — invoke when entering the 007-lang context. Registers this session as a coord peer (graceful degrade if local-coord-mcp is down), loads the 6a2 methodology pack (STATE, META, ECOSYSTEM, AGENTIC, NEUROSYM, PLAYBOOK), runs the memory auto-lift using repo-derived tags, and returns a structured A2ML payload with peer_id, session_token, methodology digests, and memory hits. Idempotent: calling twice returns the same peer_id/token.",
+      "description": "Lifecycle hook \u2014 invoke when entering the 007-lang context. Registers this session as a coord peer (graceful degrade if local-coord-mcp is down), loads the 6a2 methodology pack (STATE, META, ECOSYSTEM, AGENTIC, NEUROSYM, PLAYBOOK), runs the memory auto-lift using repo-derived tags, and returns a structured A2ML payload with peer_id, session_token, methodology digests, and memory hits. Idempotent: calling twice returns the same peer_id/token.",
       "inputSchema": {
         "properties": {
           "session_hint": {
@@ -72,7 +73,7 @@
       "name": "oo7_on_enter"
     },
     {
-      "description": "Lifecycle hook — invoke before leaving the 007-lang context. Updates STATE.a2ml's last-session fields, runs a drift check (open claims? uncommitted contractile edits? stale 6a2 files?), releases any coord task claims held by this peer, and deregisters from local-coord-mcp. Returns A2ML summary with drift findings. Safe to call even if on_enter was never invoked.",
+      "description": "Lifecycle hook \u2014 invoke before leaving the 007-lang context. Updates STATE.a2ml's last-session fields, runs a drift check (open claims? uncommitted contractile edits? stale 6a2 files?), releases any coord task claims held by this peer, and deregisters from local-coord-mcp. Returns A2ML summary with drift findings. Safe to call even if on_enter was never invoked.",
       "inputSchema": {
         "properties": {
           "reason": {
@@ -556,7 +557,7 @@
       "name": "oo7_dust_status_local"
     },
     {
-      "description": "Revert all source changes to last commit. DESTRUCTIVE — the adapter rejects this tool unless the caller holds a Tier-3 master approval. Wraps `just dust-source-rollback`.",
+      "description": "Revert all source changes to last commit. DESTRUCTIVE \u2014 the adapter rejects this tool unless the caller holds a Tier-3 master approval. Wraps `just dust-source-rollback`.",
       "inputSchema": {
         "properties": {},
         "required": [],
@@ -565,7 +566,7 @@
       "name": "oo7_dust_source_rollback"
     },
     {
-      "description": "Verify OpenSSF Best Practices prerequisites — fails if required files are missing. Wraps `just verify`.",
+      "description": "Verify OpenSSF Best Practices prerequisites \u2014 fails if required files are missing. Wraps `just verify`.",
       "inputSchema": {
         "properties": {},
         "required": [],
@@ -574,7 +575,7 @@
       "name": "oo7_verify"
     },
     {
-      "description": "Verify the Harvard architecture invariant — data expressions must not contain control flow. Wraps `just verify-harvard`.",
+      "description": "Verify the Harvard architecture invariant \u2014 data expressions must not contain control flow. Wraps `just verify-harvard`.",
       "inputSchema": {
         "properties": {},
         "required": [],

cartridges/academic-workflow-mcp/cartridge.json

@@ -6,6 +6,7 @@
   "version": "1.0.0",
   "description": "Academic workflow \u2014 Zotero integration, citations, paper review",
   "domain": "Research",
+  "category": "domain",
   "tier": "Ayo",
   "auth": {
     "method": "none"

cartridges/aerie-mcp/cartridge.json

@@ -6,6 +6,7 @@
   "version": "0.1.0",
   "description": "Aerie environment lifecycle manager",
   "domain": "infrastructure",
+  "category": "domain",
   "tier": "Ayo",
   "protocols": [
     "MCP",

cartridges/affinescript-mcp/cartridge.json

@@ -6,6 +6,7 @@
   "version": "0.1.0",
   "description": "AffineScript language cartridge -- type checking, parsing, formatting, linting, compiling, hover/goto-def/completion queries, error explanation, stdlib browsing, and syntax reference for the AffineScript language (substructural type system with affine/linear types, algebraic effects)",
   "domain": "Languages",
+  "category": "domain",
   "tier": "Ayo",
   "protocols": [
     "MCP",
@@ -195,7 +196,7 @@
     },
     {
       "name": "affinescript_hover",
-      "description": "Return type and symbol information for the symbol at a cursor position in AffineScript source code. Runs the full pipeline (parse → resolve → typecheck) and returns JSON hover info.",
+      "description": "Return type and symbol information for the symbol at a cursor position in AffineScript source code. Runs the full pipeline (parse \u2192 resolve \u2192 typecheck) and returns JSON hover info.",
       "inputSchema": {
         "type": "object",
         "properties": {

cartridges/agent-mcp/cartridge.json

@@ -6,6 +6,7 @@
   "version": "0.1.0",
   "description": "OODA loop agent session enforcer",
   "domain": "ai",
+  "category": "cross-cutting",
   "tier": "Ayo",
   "protocols": [
     "MCP",

cartridges/airtable-mcp/cartridge.json

@@ -6,6 +6,7 @@
   "version": "0.2.0",
   "description": "Airtable cartridge -- base listing, table schema retrieval, record search, record creation, record update, field listing, view browsing, webhook management, comment access, and revision history via the Airtable REST API",
   "domain": "Productivity",
+  "category": "domain",
   "tier": "Ayo",
   "protocols": [
     "MCP",
@@ -149,7 +150,7 @@
     },
     {
       "name": "airtable_update_record",
-      "description": "Update an existing record's field values (PATCH — only specified fields are updated)",
+      "description": "Update an existing record's field values (PATCH \u2014 only specified fields are updated)",
       "inputSchema": {
         "type": "object",
         "properties": {

cartridges/arango-mcp/cartridge.json

@@ -6,6 +6,7 @@
   "version": "0.1.0",
   "description": "ArangoDB multi-model database gateway. AQL queries, document operations, graph traversals, and collection management.",
   "domain": "Database",
+  "category": "domain",
   "tier": "Ayo",
   "protocols": [
     "MCP",

cartridges/aws-mcp/cartridge.json

@@ -6,6 +6,7 @@
   "version": "0.1.0",
   "description": "AWS cloud gateway. Session-based authentication with per-region slots, throttle management, and multi-service action routing.",
   "domain": "Cloud",
+  "category": "domain",
   "tier": "Ayo",
   "protocols": [
     "MCP",

cartridges/bofig-mcp/cartridge.json

@@ -6,6 +6,7 @@
   "version": "1.0.0",
   "description": "Bofig Cartridge \u2014 Evidence graph query tools for investigative workflows",
   "domain": "Research",
+  "category": "domain",
   "tier": "Ayo",
   "auth": {
     "method": "none"

cartridges/boj-health/cartridge.json

@@ -5,10 +5,13 @@
   "name": "boj-health",
   "version": "0.1.0",
   "status": "ffi_only",
-  "description": "BoJ server self-health cartridge — status, ping, and uptime queries. Self-contained Zig FFI (.so) reference implementation: no external services required.",
+  "description": "BoJ server self-health cartridge \u2014 status, ping, and uptime queries. Self-contained Zig FFI (.so) reference implementation: no external services required.",
   "domain": "infrastructure",
+  "category": "cross-cutting",
   "tier": "Ayo",
-  "protocols": ["MCP"],
+  "protocols": [
+    "MCP"
+  ],
   "auth": {
     "method": "none",
     "env_var": null,
@@ -21,7 +24,13 @@
   "ffi": {
     "so_path": "ffi/zig-out/lib/libboj_health.so",
     "abi_version": "ADR-0006",
-    "symbols": ["boj_cartridge_init", "boj_cartridge_deinit", "boj_cartridge_name", "boj_cartridge_version", "boj_cartridge_invoke"]
+    "symbols": [
+      "boj_cartridge_init",
+      "boj_cartridge_deinit",
+      "boj_cartridge_name",
+      "boj_cartridge_version",
+      "boj_cartridge_invoke"
+    ]
   },
   "tools": [
     {
@@ -34,7 +43,7 @@
     },
     {
       "name": "boj_health_ping",
-      "description": "Ping the BoJ health cartridge — always returns pong",
+      "description": "Ping the BoJ health cartridge \u2014 always returns pong",
       "inputSchema": {
         "type": "object",
         "properties": {}