fix(governance): add .hypatia-baseline.json for ReScript file exemptions

The governance Language/package check detects all .res files as banned
(ReScript banned 2026-04-30). The repo contains ~6429 pre-migration
.res files across rescript-ecosystem (upstream/vendored), cadre-router,
cadre-tea-router, affinescript-ecosystem/rattlescript (AffineScript↔RS
bridge), aggregate-library, coq-ecosystem (upstream jsCoq), deno-ecosystem,
and v-ecosystem/v-deno.

Add .hypatia-baseline.json with 8 file_pattern entries covering each
directory, following the cicd_rules/banned_language_file exemption
mechanism documented in governance-reusable.yml. Each entry includes
rationale and unblock_condition.

Also removes stale submodule index entries (C-BJ-awesome-zig, awesome-zig)
that caused `startup_failure` on every scorecard run (git submodule foreach
hit `fatal: No url found for submodule path` → exit 128 → checkout fail).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: hyperpolymath

.hypatia-baseline.json

@@ -0,0 +1,58 @@
+[
+  {
+    "rule_module": "cicd_rules",
+    "type": "banned_language_file",
+    "file_pattern": "rescript-ecosystem/**",
+    "rationale": "rescript-ecosystem is a vendor/upstream collection of ReScript libraries and forks; migration to AffineScript tracked in estate migration plan.",
+    "unblock_condition": "When rescript-ecosystem is migrated or archived."
+  },
+  {
+    "rule_module": "cicd_rules",
+    "type": "banned_language_file",
+    "file_pattern": "affinescript-ecosystem/rattlescript/**",
+    "rationale": "rattlescript contains affine-res bridge package (AffineScript↔ReScript interop layer); .res files are the bridge source, not new ReScript.",
+    "unblock_condition": "When affine-res bridge is replaced by AffineScript-native bindings."
+  },
+  {
+    "rule_module": "cicd_rules",
+    "type": "banned_language_file",
+    "file_pattern": "cadre-router/**",
+    "rationale": "cadre-router is a ReScript library (router primitives); pending migration to AffineScript.",
+    "unblock_condition": "When cadre-router is migrated to AffineScript."
+  },
+  {
+    "rule_module": "cicd_rules",
+    "type": "banned_language_file",
+    "file_pattern": "cadre-tea-router/**",
+    "rationale": "cadre-tea-router is a ReScript TEA router; pending migration to AffineScript.",
+    "unblock_condition": "When cadre-tea-router is migrated to AffineScript."
+  },
+  {
+    "rule_module": "cicd_rules",
+    "type": "banned_language_file",
+    "file_pattern": "aggregate-library/**",
+    "rationale": "aggregate-library contains pre-migration ReScript source; migration tracked in estate plan.",
+    "unblock_condition": "When aggregate-library is migrated to AffineScript."
+  },
+  {
+    "rule_module": "cicd_rules",
+    "type": "banned_language_file",
+    "file_pattern": "coq-ecosystem/**",
+    "rationale": "coq-ecosystem/coq-jr contains upstream jsCoq demo .res files; vendored upstream, not estate-authored.",
+    "unblock_condition": "Never — upstream vendored code."
+  },
+  {
+    "rule_module": "cicd_rules",
+    "type": "banned_language_file",
+    "file_pattern": "deno-ecosystem/**",
+    "rationale": "deno-ecosystem/projects contains pre-migration ReScript projects; migration tracked in estate plan.",
+    "unblock_condition": "When deno-ecosystem projects are migrated to AffineScript."
+  },
+  {
+    "rule_module": "cicd_rules",
+    "type": "banned_language_file",
+    "file_pattern": "v-ecosystem/v-deno/**",
+    "rationale": "v-ecosystem/v-deno contains ReScript interop bridge files; V-lang migration completed 2026-05-28, ReScript interop pending.",
+    "unblock_condition": "When v-deno ReScript files are migrated to AffineScript."
+  }
+]