chore(governance): own toolchain sync files

[tom-sapletta-com]

Outcome

Assign the existing Koru development DSL and uv lockfile to the integration workstream so deterministic dependency maintenance can pass fail-closed governance.

Scope

• integration ownership: app.doql.less and uv.lock
• integration routing: app.doql.less and uv.lock
• immutable manifest digest synchronized
• no dependency values or executable code changed

Evidence

• manifest SHA-256 matches the lock
• governance check: 0 errors, 0 warnings
• diff check: pass

This governance-only prerequisite keeps the Goal 2.1.292 dependency update isolated in ticket-004.

[ifuri-validator-agent]

Deterministic Validator approval for exact head 9ebe4f5dd72740008e5ced1824ece60a428f21e0.

Ticket: ticket-005
Correlation ID: koru-ticket-005-9ebe4f5-20260810
Model: openrouter/z-ai/glm-5.2
Reviewed diff chunks: 1
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 1 diff chunk(s). Governance-only change assigning app.doql.less and uv.lock to the integration workstream's ownership and required-for-paths, with manifest lock digest synchronized. No runtime, dependency value, source, test, CI, or Docker changes. Ticket metadata is consistent and smoke test passes.
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Merge was not requested or performed.

Decision record (recomputable)

DECISION D-005-2432
TICKET ticket-005
HEAD_SHA 9ebe4f5dd72740008e5ced1824ece60a428f21e0
CORRELATION_ID koru-ticket-005-9ebe4f5-20260810
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "tom-sapletta-com"
INPUT observed_checks = ["smoke=PASS"]
INPUT required_checks = ["smoke"]
INPUT required_checks_source = "env/request"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "openrouter/z-ai/glm-5.2"
ASSERT VERDICT_AUTHORITY != "ADVISORY"