Add opt-in Operator OS identity-resolution audit

[saagpatel]

What

• Adds an explicit identity-resolution audit mode to the Operator OS seam linter.
• Keeps the default seam-linter focused on the v0 truth/markdown contract.
• Surfaces bridge-db, notification-hub, session-cost, and Notion identity drift only when --identity-resolution is requested.

Why

• The identity audit is valuable, but current local history produces hundreds of known drift findings.
• Default Truth Drift verification should stay stable and enforceable.

Verification

• PYTHONDONTWRITEBYTECODE=1 uv run pytest -q tests/test_operator_os_seam_linter.py -p no:cacheprovider
• uv run ruff check src/operator_os_seam_linter.py tests/test_operator_os_seam_linter.py src/project_registry.py
• uv run python -m src.operator_os_seam_linter --truth output/portfolio-truth-latest.json --json | jq '{state, findings_count:(.findings|length)}'
• uv run python -m src.operator_os_seam_linter --identity-resolution --truth output/portfolio-truth-latest.json --json > /tmp/ghra-identity-resolution.json

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ef98c90bc6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".