chore(m175): close workstream 001 — spec to done, rubric graded

CHORE(close). Spec moves active/ -> done/, Status: DONE, and all twelve rubric
rows are graded from verbatim command output rather than from memory.

Grading R4 honestly is what made this commit worth its own diff: the first pass
claimed the diff stayed inside Files Changed, and a mechanical check found 31
paths that were not. The table now carries a row for every retirement casualty —
the deleted workflows, the swept scripts, the make fragments — and the check
reports 138 changed paths against 46 patterns with none uncovered.

Codecov moves to what Indy asked for: the PROJECT target goes from `auto` to
100%, measured over app, website, the agentsfleet CLI and the Rust workspace
only. The Zig tree joins `ignore` because its lanes retired and nothing uploads a
report covering it, and the three zig-* patch targets are deleted — a target on a
flag that can never report is a gate that grades nothing.

Dimension 4.5 stays IN_PROGRESS with its reason stated: it asserts what a real CI
run reports, so it cannot be graded before the Pull Request exists. Every other
Dimension is DONE.

AGENTS.md gains the worktree step that was missing. `make test-coverage-all`
failed here while passing on main, resolving next/headers; the documented recipe
hydrates the root and cli/ but not ui/packages/*. That reads as a code defect and
is not one, so the recipe now says so.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>