Merge main into chore/pmpl-normalize

Resolved conflicts:
- Kept symlinks for .scm files (AGENTIC, ECOSYSTEM, META, NEUROSYM, PLAYBOOK, STATE)
- All actual .scm files remain in .machine_readable/ directory
- Removed INDEX.adoc files from GUIDES_v0.4/ and TOOLKIT_v0.4/ as per PR intent
- Kept structured ARCHIVE/README.adoc from PR branch

All .scm files are now properly normalized with single copies in .machine_readable/
and symlinks at root, per repository policy.

Author: Your Name

.github/workflows/casket-pages.yml

@@ -29,13 +29,13 @@ jobs:
           path: .casket-ssg
 
       - name: Setup GHCup
-        uses: haskell-actions/setup@dc63c94789664bb2910876ec3dfeeaa24d23b96b # v2
+        uses: haskell-actions/setup@f9150cb1d140e9a9271700670baa38991e6fa25c # v2
         with:
           ghc-version: '9.8.2'
           cabal-version: '3.10'
 
       - name: Cache Cabal
-        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v4
+        uses: actions/cache@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v4
         with:
           path: |
             ~/.cabal/packages

.github/workflows/quality.yml

@@ -18,7 +18,7 @@ jobs:
           find . -type f -perm /111 -name "*.sh" | head -10 || true
       
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@ef6e76c3c4023279497fab4721ffa071a722fd05 # v3.92.4
+        uses: trufflesecurity/trufflehog@116e7171542d2f1dad8810f00dcfacbe0b809183 # v3.92.5
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha || github.event.before }}

.github/workflows/secret-scanner.yml

@@ -18,7 +18,7 @@ jobs:
           fetch-depth: 0  # Full history for scanning
 
       - name: TruffleHog Secret Scan
-        uses: trufflesecurity/trufflehog@ef6e76c3c4023279497fab4721ffa071a722fd05 # v3
+        uses: trufflesecurity/trufflehog@116e7171542d2f1dad8810f00dcfacbe0b809183 # v3
         with:
           extra_args: --only-verified --fail
 

v0.4/thisfile

@@ -0,0 +1 @@
+