refactor: go harness-agnostic — drop Crush hooks, enforce Discourse SoR

Apply answers to questions-v1.md (Q1–Q5):

- Q4: Remove crush.json and hooks/ entirely. All enforcement is now portable
  via git hooks (pre-commit/pre-push) + check-rules.sh + AGENTS.md prose.
  Works under Crush, OpenWebUI, Hermes, or any agent framework.
- Q5: Remove docs/JOURNAL.md. Redmine is the system of record for work;
  Discourse for docs. JOURNAL.md was a stopgap.
- Q3: Add mandatory Discourse pointer-header check to check-rules.sh. Any
  non-exempt tracked .md without a Discourse URL FAILs. All projects, no
  exceptions.
- Q2: Reference real CLI container invocation paths
  (KNEL-AIMiddleware/{redmine,discourse}-cli/) in AGENTS.md instead of the
  missing bin/ shortcuts.
- Q1: Note tea + docker login are preconfigured on TSYS workstations.

Also: make test default is now no-op pass so the template self-validates;
make validate now passes clean on the repo itself (17 PASS / 0 FAIL).

💘 Generated with Crush

Assisted-by: Crush via Crush <crush@charm.land>

scripts/setup-hooks.sh

@@ -33,9 +33,10 @@ cat <<EOF
 
 Git hooks installed. The following now run automatically:
 
-  pre-commit  fast rule audit (shellcheck, image pinning, required files,
-              doc freshness, WORKING.md completion, hygiene).
-              Hot-path bypass for STATUS.md / JOURNAL.md / WORKING.md.
+  pre-commit  fast rule audit (shellcheck, image pinning, container naming,
+              required files, doc freshness, Discourse pointers, WORKING.md
+              completion, hygiene).
+              Hot-path bypass for STATUS.md / WORKING.md.
   pre-push    full rule audit (includes make test) + clean-working-tree gate.
 
 Bypass either with \`git commit --no-verify\` / \`git push --no-verify\`