Add Local Model Door CLI surface

[mdheller]

Summary

Adds sourceosctl local-model ... as a non-mutating Local Model Door probe and route-planning surface.

This gives Agent Machine, Office Plane, and model-router a safe local model status surface without downloading models, starting services, or executing model calls.

Commands

sourceosctl local-model doctor
sourceosctl local-model profiles
sourceosctl local-model plan --profile local-llama32-1b
sourceosctl local-model route --task-class office-assist
sourceosctl local-model evidence inspect ./local-model-route.json

Safety posture

• Does not download model weights.
• Does not start Ollama or any other service.
• Does not execute model calls.
• Does not send request text off-device.
• Route planning stores no request text.
• Personalized local route planning requires a governance reference.

Contract alignment

• SourceOS-Linux/sourceos-model-carry: LocalModelProfile refs.
• SocioProphet/model-router: local/personal route binding refs.
• SocioProphet/model-governance-ledger: per-user governance refs.
• SociOS-Linux/socios: opt-in personalization orchestration.

Validation

Expected repo validation:

make validate