docs(profile): codify role separation policy

[ArchonVII]

Summary

Codifies ArchonVII's lifecycle roles and lane-specific merge authority in the org profile docs.

This documents Project-Captain, Open-Admiral, Project-Lieutenant, Release-Admiral, and Issue-Admiral as distinct authorities; adds the Owner Maintenance Lane, the hard separation requirement for agent-managed code/config PRs, the global soft-warning default, the Dependabot auto-merge exception, and a standard agent closeout/update format.

Linked Issue

Closes #14

Scope

• In scope:
  • Update profile/README.md with role responsibilities, lane policy, Dependabot exception, and closeout format.
  • Update root README.md to point maintainers and agents to the profile policy.
• Out of scope:
  • No github-workflows PR-policy enforcement logic in this repo.
  • No repo-template or archon-setup edits.
  • No cross-repo CODEOWNERS creation.

Changelog

N/A: org-profile documentation-only policy update; this repo does not currently use changelog fragments.

Verification

Verification Notes

Each checked box below must be backed by exactly one fenced evidence block. The PR-policy parser (warning-only in Phase 1, will hard-fail in Phase 2+) reads them.

Required fields: command, location (one of local / ci / manual), result, timestamp. Optional: check (used when location: ci and the check-run name differs from the command).

• Tests pass

  command: git diff --check
  location: local
  result: passed with no whitespace errors
  timestamp: 2026-05-28T23:30:01Z
  

• CI green on this branch

  command: gh pr checks 20 --json name,state,bucket,link
  location: ci
  result: no checks reported on the agent/codex/14-role-separation branch
  timestamp: 2026-05-28T23:30:01Z
  

• Visual / manual review

  command: rg -n "^#|^##|^###|^\\| Role \\||Owner Maintenance Lane|Agent-Managed Code/Config PRs|Global Default|Dependabot Exception|Standard Agent Closeout" README.md profile/README.md
  location: manual
  result: confirmed rendered Markdown structure has Roles, Lane Policy, Owner Maintenance Lane, Agent-Managed Code/Config PRs, Global Default, Dependabot Exception, and Standard Agent Closeout sections
  timestamp: 2026-05-28T23:30:01Z
  

Risks

• Risk level: Low. Documentation-only change.
• Rollback: Revert the docs commit.
• Follow-ups:
  • github-workflows: add PR-policy soft warning for same-account author/merger identity and scoped hard block for protected paths/lane rules.
  • repo-template: document Owner Maintenance Lane agent behavior and ensure hooks allow the documented owner maintenance constraints.