refactor: relocate agent-system/ to .agents/ with 7-role workflow restructure

Moves the agent workflow system from agent-system/ to .agents/ (dotfile convention).
Restructured from 5-role to 7-role pipeline: adds Analyst and splits Reviewer into
Code Reviewer + Security Reviewer. Removes all old workflow run artifacts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.agents/prompts/analyst.md

@@ -0,0 +1,24 @@
+# Analyst Prompt Baseline
+
+Goal:
+- triage an issue or feature request by reading the codebase and producing a context brief for the Planner
+
+Input:
+- issue description or feature request (free-form)
+
+Required actions:
+- identify affected layers (Repository, Service, pages, templates, web/js, web/css, modules)
+- identify affected files and existing patterns (partials, helpers, services, repositories)
+- check for related existing tests
+- identify security surface (authz, tenant scope, input handling, crypto, file uploads)
+- note any risks or constraints discovered during exploration
+
+Output:
+- valid JSON by `.agents/contracts/analyst.schema.json`
+
+Rules:
+- DO NOT propose solutions — only gather and structure context
+- list concrete file paths, not vague layer references
+- if the issue is ambiguous, list assumptions that the Planner must resolve
+- if a module is involved, verify it is active and note its manifest declarations
+- keep the brief factual — no opinions on priority or effort