F149: retire strict doc-sync debt

[fall-out-bug]

Summary

• adds the F149-02 spec/workstream and pi-review synthesis for retiring strict doc-sync debt
• fixes the 56 strict doc-sync findings across broken links, ROADMAP/INDEX records, scaffold sections, and Beads references
• makes strict doc-sync blocking in CI again while leaving broader repo-consistency/protocol findings advisory

Review evidence

• Slice 1 spec review: requirements, evidence/tracing, DX/gate planes recorded in docs/reviews/f149-doc-sync-debt/spec-review-synthesis.md
• Slice 2 cleanup review: requirements, evidence/tracing, DX planes recorded in docs/reviews/f149-doc-sync-debt/slice-2-review-synthesis.md
• Slice 3 policy review: gate policy and DX planes recorded in docs/reviews/f149-doc-sync-debt/slice-3-review-synthesis.md

Local verification

• go run ./cmd/sdp-doc-sync --mode check --strict
• go run ./cmd/sdp-protocol-check --format json --strict
• go run ./cmd/sdp-doc-sync --mode check --format json --strict
• SKIP_DOCKER=1 SDP_GO_QUALITY_MODE=host ./scripts/run_go_quality_gates.sh

Note: container quality mode fails from this macOS worktree because Docker sandbox tests see a mounted temp/worktree directory as non-module. The repo-supported host fallback passes with sqlite_fts5; Docker sandbox was skipped via SKIP_DOCKER=1.

[github-actions]

SDP Auto-Attestation

Field	Value
Branch	feature/F149-doc-sync-debt
Commit	9e6fbd23
Changed files	49
Tests	✅ pass (6129 passed, 0 failed)
Lint	✅
Scope	✅ no linked workstreams — auto-attested from CI observation
Attestation generation	✅
Coverage	⚠️ 65.27285714285715%
Signed	✅ Sigstore bundle
Beads	none

Full attestation report

{
  "all_lint_pass": true,
  "all_tests_pass": true,
  "attestation_id": "ci-auto-155-9e6fbd23",
  "beads_ids": [],
  "branch": "feature/F149-doc-sync-debt",
  "changed_files": 49,
  "coverage_ok": false,
  "coverage_pct": 65.27285714285715,
  "coverage_threshold": 80,
  "generated_at": "2026-05-15T10:29:53Z",
  "head_commit": "9e6fbd23eb0b3b69bff83ba6161cc5774bb5a8e0",
  "lint_results": [
    {
      "name": "go-vet",
      "status": "pass"
    },
    {
      "name": "golangci-lint",
      "status": "pass"
    }
  ],
  "out_of_scope": [],
  "scope_compliance": {
    "ok": true,
    "reason": "no linked workstreams — auto-attested from CI observation"
  },
  "test_results": [
    {
      "name": "go-test",
      "status": "pass (6129 passed, 0 failed)"
    }
  ],
  "type": "ci-auto-attestation"
}

Generated by SDP auto-attestation