fix(ci): drop extracted pkg/registry + pkg/secure from arch-gates (#182)

PR #155 extracted pkg/registry to pilot-protocol/rendezvous and
pkg/secure to pilot-protocol/common, but the architecture-gates
workflow still ran 'go test ./pkg/registry/... ./pkg/secure',
which now fails with 'no such file or directory' on every PR.

Replace with ./pkg/daemon/... — the daemon-side lock graph
(Store.mu, ReplayMu, SalvageMu, tm.mu) is what this gate is
actually meant to cover. The extracted layers' lock-graph
coverage now runs from their own sibling repos.

Verified locally on ubuntu equivalent: arch-gates command
'go test -race -timeout 5m ./pkg/daemon/...' completes without
the missing-directory errors.

Unblocks PRs #177, #178, #179, #180.

Co-authored-by: Teodor Calin <teodor@vulturelabs.io>

Author: TeoSlayer

.github/workflows/architecture.yml

@@ -27,7 +27,11 @@ jobs:
       # and the no_<plugin> build tags they exercised left with them.
 
       - name: Lock-graph race detection (sec 4.8)
-        run: go test -race -timeout 5m ./pkg/daemon ./pkg/registry/... ./pkg/secure
+        # pkg/registry/ and pkg/secure/ extracted to pilot-protocol/{rendezvous,common}
+        # in PR #155; lock-graph coverage for those layers now runs from
+        # their own repos. pkg/daemon stays — that's where the daemon-side
+        # lock graph (Store.mu, ReplayMu, SalvageMu, tm.mu, …) actually lives.
+        run: go test -race -timeout 5m ./pkg/daemon/...
 
       - name: Lock-graph stress harness (sec 4.8) — TestConcurrentDialEncryptDecrypt
         # 1000 goroutines × 30 s × 3 reps = ~90 s wall time. Race-clean,