v2 foundation: shared contracts, app profile schema, wiring stubs

- projects: app profile columns + one app per org; project_external_git,
  deploy_targets, org_model_grants tables (migration a0f0e1d2c3b4)
- ports + fakes: RepoWorkspace, DeliveryHooks, DeployTarget, Memory,
  ModelGrants, WorkforceBootstrap; AppProfile + AppProfileRepository
- per-workstream wiring (container_org/engine/delivery), config blocks,
  empty routers, delivery worker, MCP/delivery service shells, web stubs
- admin nav derives from ADMIN_ITEMS; plan docs updated for ext4 worktrees

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

apps/api/app/application/container.py

@@ -15,6 +15,13 @@ from __future__ import annotations
 
 from sqlalchemy.ext.asyncio import AsyncSession
 
+from app.application.container_delivery import (
+    build_delivery_hooks,
+    build_deploy_target_tester,
+    build_repo_workspace,
+)
+from app.application.container_engine import build_workforce_bootstrap
+from app.application.container_org import build_memory, build_model_grants
 from app.application.services.billing_service import BillingService
 from app.application.services.knowledge_service import KnowledgeService
 from app.application.services.project_service import ProjectService
@@ -158,6 +165,12 @@ def build_sandbox_service(session: AsyncSession) -> SandboxService:
 
 __all__ = [
     "build_billing_service",
+    "build_delivery_hooks",
+    "build_deploy_target_tester",
+    "build_memory",
+    "build_model_grants",
+    "build_repo_workspace",
+    "build_workforce_bootstrap",
     "build_knowledge_service",
     "build_project_service",
     "build_sandbox_service",