ci: deploy dogfood-gate, update wellknown-enforcement, add TEST-NEEDS.md

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/wellknown-enforcement.yml

@@ -33,7 +33,7 @@ jobs:
           [ -f "security.txt" ] && SECTXT="security.txt"
           
           if [ -z "$SECTXT" ]; then
-            echo "::warning::No security.txt found. See https://github.com/{{OWNER}}/well-known-ecosystem"
+            echo "::warning::No security.txt found. See https://github.com/hyperpolymath/well-known-ecosystem"
             exit 0
           fi
           
@@ -69,7 +69,7 @@ jobs:
           
           if [ -n "$MISSING" ]; then
             echo "::warning::Missing RSR recommended files:$MISSING"
-            echo "Reference: https://github.com/{{OWNER}}/well-known-ecosystem/.well-known/"
+            echo "Reference: https://github.com/hyperpolymath/well-known-ecosystem/.well-known/"
           else
             echo "✅ RSR well-known compliant"
           fi

.well-known/groove/manifest.json

@@ -0,0 +1,26 @@
+{
+  "applicability": [
+    "individual",
+    "team"
+  ],
+  "capabilities": {
+    "primary": {
+      "description": "TODO: describe this service's primary capability",
+      "panel_compatible": true,
+      "protocol": "cli",
+      "requires_auth": false,
+      "type": "custom"
+    }
+  },
+  "consumes": [],
+  "groove_version": "1",
+  "health": null,
+  "invoke_patterns": {
+    "ci": "flatracoon --ci --format json",
+    "local": "flatracoon --interactive",
+    "mcp": "boj cartridge_invoke flatracoon"
+  },
+  "mode": "passive",
+  "service_id": "flatracoon",
+  "service_version": "0.1.0"
+}

TEST-NEEDS.md

@@ -1,5 +1,7 @@
 # CRG C Test Coverage — FlatRacoon Hesiod DNS Mapping
 
+## CRG Grade: C — ACHIEVED 2026-04-04
+
 **Date:** 2026-04-04  
 **Module:** `netstack/modules/hesiod-dns-map/crates/hesiod-lib/`  
 **Status:** COMPLETE — All CRG C requirements met