State each simulation fact once, as the scripts do it

Andrew Dunnrequested to merge
cleanup/simulation-body into main

What

The simulation half of the skill states each fact once and describes what the scripts do. The maintainer register leaves the loaded skill for docs/maintenance.md, each leaf carries one done-when, and loaded Markdown drops from 51,848 words to about 44,600 with the ceiling lowered to 46,000.

Why

Leaves copied pins and counts that drifted from the code (the CNPG operator version), described airgap behavior the scripts do not have (a catch-all mirror, helm installs from mirrored charts), and gave three different teardown filters. A reader who trusted the docs over the code got a wrong result.

How

  • MAINTENANCE.md moves to docs/maintenance.md after its duplicate sections go; the DAP implementation notes move into gce/dap.md.
  • Docs point at the file that pins a version instead of copying it.
  • One teardown filter, with the owner-label normalization stated.
  • The spine keeps the teardown-confirmation criterion word-identical to gce/operations.md, because some paths never open that leaf.
  • just lab selftest (an alias of doctor) and the no-op aigw-jwt-setup go; neither had a caller.
  • The plugin lane reads SIM_PLUGIN_BEDROCK_MODEL, SIM_PLUGIN_VERTEX_MODEL and SIM_PLUGIN_VERTEX_MODEL_NAME, so exporting the real-model knobs no longer changes the plugin lane. OpenShift Local reads SIM_PULL_SECRET_FILE, like the AWS lane. Both scripts warn when only an old name is set.
  • The legacy sim-enclave seal handling goes; the project holds no such rules.
  • Each just lab recipe has a one-line doc, so the menu reads.

Verification

  • just ci passes, including the engine self-tests.
  • The fidelity test on the integrated cleanup: KEEP after restoring the spine teardown line and homing four caveats the first run found orphaned (add-on purchase, License.new, Geo drift-check first, real-model off before down).

Merge request reports