Cost context governance

[icidade]

Summary

• add the MiniCISO-side governance v0.7.0 design note
• document the RTK execution output optimizer experiment and guardrails
• align public docs and helper scripts with portable repo/profile path conventions
• ensure bootstrap and smoke-test flows respect custom HERMES_HOME

Scope

• documentation-first PR with small portability fixes in public tooling/install scripts
• no secrets or auth state in the repository
• install/smoke-test flow works with both default ~/.hermes and custom HERMES_HOME

Changed files

• docs/cost-context-governance-design.md
• docs/dependencies-and-configuration.md
• docs/github-pr-access.md
• docs/headroom-kag-selective-retrieval.md
• docs/self-update-capability.md
• scripts/bootstrap.ps1
• scripts/bootstrap.sh
• scripts/export_safe_self_state.py
• scripts/smoke-test.ps1
• scripts/smoke-test.sh
• tools/headroom_phase1/hr_manual_wrapper.py

Validation

• ./scripts/validate-repo.sh
• python3 -m unittest discover -s tools/headroom_phase1/tests -p 'test_*.py'
• shell/python syntax checks for touched scripts
• simulated bootstrap + smoke-test run with custom HERMES_HOME
• review of the PR diff for portable/public path conventions

Notes

• portable $HOME / ~ references that describe installation/runtime behavior remain intentional
• documentation examples now use repo/profile-root placeholders where absolute operator-specific paths would be misleading