fix(abi-drift): remove chapeliser-mcp from allowlist (dir does not exist) (#136)

## Summary

PR #133 added `chapeliser-mcp` to the ABI Drift Gate allowlist (56 → 66
expansion) but the corresponding `cartridges/chapeliser-mcp/` directory
does not exist in the tree.

The per-cartridge loop's `ls cartridges/<n>/abi/*/Safe*.idr` returns
exit 2 under `set -euo pipefail`, which fails the whole job — every PR's
ABI Drift Gate goes red on `chapeliser-mcp` before reaching its actual
changes. This is what's currently failing on #134 (browser-mcp rename,
unrelated).

## Change

- Drop `echo 'chapeliser-mcp'` from the allowlist heredoc (line 101).
- Comment updated to match: 66 → 65, "ADDS 11" → "ADDS 10", `chapeliser`
removed from the list of "newly-unblocked" additions.
- Added a paragraph explaining why the entry was removed, so the next
allowlist expansion doesn't re-add it without first landing the
cartridge tree.

Allowlist returns to 65 entries. Net diff: +7 / -5.

## Verification

- [x] Confirmed `cartridges/chapeliser-mcp/` does not exist on
`origin/main`
- [x] Confirmed the other six newly-allowlisted dirs from #133 (cloud,
comms, container, git, gitlab-api, ml, plus mongodb, queues, research,
vordr — total 10) do exist and parse fine in the same CI log
- [x] The pre-fix run on #134 shows `abi-drift: chapeliser-mcp`
immediately followed by `ls: cannot access ...` and `##[error]Process
completed with exit code 2`

## Follow-up

If chapeliser-mcp is meant to exist as a cartridge, the cartridge tree
can be scaffolded with `iseriser cartridge` (see iseriser#24, the
standards#89 Phase 2b PR). That's a separate PR with a different scope;
this one just unblocks CI.

Refs #133, #134

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/abi-drift.yml

@@ -70,14 +70,14 @@ jobs:
 
       - name: Resolve cartridge allowlist
         id: discover
-        # 81 cartridges in the tree carry a paired Safe*.idr + *_ffi.zig.
-        # 66 are audited green against the Phase 1b emitter + Phase 1
+        # 80 cartridges in the tree carry a paired Safe*.idr + *_ffi.zig.
+        # 65 are audited green against the Phase 1b emitter + Phase 1
         # verifier (re-run 2026-05-20 after iseriser#20 / #21 / #22 merged:
         # GADT-skip in the emitter, runtogether candidate for multi-cap
         # acronyms, and terminal `false` switch-arm tolerance in the
         # verifier). Versus the previous 56-cartridge allowlist this:
-        #   * ADDS 11 cartridges that the three iseriser fixes unblocked
-        #     (chapeliser, cloud, comms, container, git, gitlab-api, ml,
+        #   * ADDS 10 cartridges that the three iseriser fixes unblocked
+        #     (cloud, comms, container, git, gitlab-api, ml,
         #     mongodb, queues, research, vordr)
         #   * REMOVES browser-mcp — newly-detected genuine drift
         #     (`BrowserAction.Type` ↔ Zig `type_text`; cartridge-side
@@ -88,6 +88,9 @@ jobs:
         # and Class E (malformed Idris2 source) are now empty: iseriser#22
         # closed Class P (5 cartridges) and the vordr-mcp Class E case
         # was closed via iseriser#20 + the cartridge's clean re-survey.
+        # chapeliser-mcp was over-listed in #133 — the cartridge dir does
+        # not exist in the tree; the loop's `ls cartridges/<n>/abi/*/...`
+        # fails with exit code 2 and the whole job goes red.
         run: |
           set -euo pipefail
           {
@@ -98,7 +101,6 @@ jobs:
             echo 'airtable-mcp'
             echo 'arango-mcp'
             echo 'buildkite-mcp'
-            echo 'chapeliser-mcp'
             echo 'clickhouse-mcp'
             echo 'cloud-mcp'
             echo 'cloudflare-mcp'