v2 foundation: shared contracts, app profile schema, wiring stubs

- projects: app profile columns + one app per org; project_external_git,
  deploy_targets, org_model_grants tables (migration a0f0e1d2c3b4)
- ports + fakes: RepoWorkspace, DeliveryHooks, DeployTarget, Memory,
  ModelGrants, WorkforceBootstrap; AppProfile + AppProfileRepository
- per-workstream wiring (container_org/engine/delivery), config blocks,
  empty routers, delivery worker, MCP/delivery service shells, web stubs
- admin nav derives from ADMIN_ITEMS; plan docs updated for ext4 worktrees

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

package.json

@@ -20,6 +20,8 @@
     "worker:billing": "pnpm --filter @agy/billing-worker once",
     "worker:ai-runtime": "pnpm --filter @agy/ai-runtime once",
     "worker:sandbox-gateway": "pnpm --filter @agy/sandbox-gateway once",
+    "worker:delivery": "pnpm --filter @agy/delivery-worker once",
+    "mcp:dev": "pnpm --filter @agy/mcp-gateway dev",
     "clean": "rm -rf node_modules apps/*/node_modules packages/*/node_modules services/*/node_modules"
   },
   "devDependencies": {