chore: add UX infrastructure (quickstart, doctor, setup)

Added by ux-rollout.jl batch script.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

Justfile

@@ -121,3 +121,17 @@ help-me:
     @echo "  https://github.com/hyperpolymath/zerotier-k8s-link/issues/new"
     @echo ""
     @echo "Include the output of 'just doctor' in your report."
+
+# Attempt to automatically install missing tools
+heal:
+    #!/usr/bin/env bash
+    echo "═══════════════════════════════════════════════════"
+    echo "  Zerotier K8S Link Heal — Automatic Tool Installation"
+    echo "═══════════════════════════════════════════════════"
+    echo ""
+if ! command -v just >/dev/null 2>&1; then
+    echo "Installing just..."
+    cargo install just 2>/dev/null || echo "Install just from https://just.systems"
+fi
+    echo ""
+    echo "Heal complete. Run 'just doctor' to verify."

contractiles/intend/Intentfile.a2ml

@@ -0,0 +1,22 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Intentfile (A2ML Canonical)
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)
+
+@abstract:
+Declared intent and purpose for Zerotier K8S Link.
+@end
+
+## Purpose
+
+Zerotier K8S Link — // SPDX-License-Identifier: PMPL-1.0-or-later
+
+## Anti-Purpose
+
+This project is NOT:
+- A fork or wrapper around another tool
+- A monorepo (unless explicitly structured as one)
+
+## If In Doubt
+
+If you are unsure whether a change is in scope, ask.
+Sensitive areas: ABI definitions, license headers, CI workflows.

contractiles/trust/Trustfile.a2ml

@@ -0,0 +1,25 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Trustfile (A2ML Canonical)
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)
+
+@abstract:
+Trust and provenance verification for Zerotier K8S Link.
+Maximal trust by default — LLM may read, build, test, lint, format.
+@end
+
+@trust-level: maximal
+@trust-boundary: repo
+@trust-actions: [read, build, test, lint, format]
+@trust-deny: [delete-branch, force-push, modify-ci-secrets, publish]
+
+## Integrity
+
+### license-content
+- description: LICENSE contains expected SPDX identifier
+- run: grep -q 'SPDX\|License\|MIT\|Apache\|PMPL\|MPL' LICENSE
+- severity: critical
+
+### no-secrets-committed
+- description: No .env or credential files in repo
+- run: test ! -f .env && test ! -f credentials.json && test ! -f .env.local
+- severity: critical