chore(steward): non-vacuous ADR-0005 arch gate + marshal.json reconcile

[cuioss-oliver]

Summary

Two unrelated-in-origin but co-landed changes from a /marshall-steward upgrade pass:

1. test(arch) — make the ADR-0005 framework-agnostic gate non-vacuous

FrameworkAgnosticArchTest ran its real rule with allowEmptyShould(true). A renamed
package or a single misspelled entry in AGNOSTIC_PACKAGES would therefore have matched
zero classes, found zero violations, and stayed green while protecting nothing. The
existing negative control could not catch that — it exercises its own hardcoded package,
so it proves the ArchUnit mechanism works while saying nothing about whether the real
package list still resolves.

• Dropped allowEmptyShould(true) from the real rule.
• Added everyAgnosticPackageResolvesToClasses(), which asserts every entry in
  AGNOSTIC_PACKAGES resolves to at least one production class and names the offending
  entry when it does not.
• Extended FRAMEWORK_PACKAGES with io.smallrye.., io.netty.. and org.jboss... The
  class Javadoc already names the per-route SmallRye Fault-Tolerance guard as precisely the
  coupling that keeps routing out of the agnostic set; leaving it unlisted would let an
  agnostic-core class acquire that same coupling unchecked. Netty and JBoss arrive
  transitively with the Quarkus/Vert.x stack and are framework by any reading of ADR-0005.
• The negative control keeps allowEmptyShould(true) deliberately — there the
  asymmetry is load-bearing: an emptied control package makes check pass, which makes
  assertThrows fail loudly, telling us the control stopped controlling anything.

2. chore(steward) — reconcile marshal.json

Steward upgrade against plan-marshall 0.1.1274: sync-defaults back-filled
system.retention.no_plan_body_days and re-stamped the provisioning fields. Executor
regenerated (141 scripts); 30 superseded plugin-cache version dirs pruned.

Verification

verify -Ppre-commit passed (exit 0, 231s).

Review

Labelled skip-bot-review.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🚫 Excluded labels (none allowed) (1)

• skip-bot-review

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: cuioss/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: df85bda0-ae4e-4115-b123-8dee4056720e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}