feat: add .architect/ project mapping system with architect-indexer agent and Docker containerization

- Add .architect/ directory structure (10 template files) as project brain for agent orientation
- Add architect-indexer agent that scans codebase and generates structured architecture docs
- Add Docker containerization: Dockerfile.architect-indexer, docker-compose.architect.yml
- Add TypeScript project-mapper module with staleness detection and context injection
- Add /index-project command, architect-first-contact rule, project-mapping skill
- Integrate orchestrator first-contact check: triggers indexing before any task delegation
- Add npm arch:* scripts for Docker-based indexing workflow
- Register agent in capability-index.yaml and AGENTS.md

.architect/api-surface/endpoints.md

@@ -0,0 +1,49 @@
+# API Surface
+
+> Auto-generated by `architect-indexer`. DO NOT edit manually.
+
+## Endpoints
+
+| Method | Path | Auth | Controller | Description |
+|--------|------|------|-----------|-------------|
+| _pending_ | _pending_ | _pending_ | _pending_ | _pending_ |
+
+_This section is populated after the first index run._
+
+## Detailed Endpoint Definitions
+
+### `METHOD /api/path`
+
+**Auth**: Required / None / Optional
+**Rate Limit**: _pending_
+
+**Request**:
+| Field | Type | Required | Validation | Description |
+|-------|------|----------|------------|-------------|
+| _pending_ | _pending_ | _pending_ | _pending_ | _pending_ |
+
+**Response 200**:
+| Field | Type | Description |
+|-------|------|-------------|
+| _pending_ | _pending_ | _pending_ |
+
+**Errors**:
+| Code | Condition | Message |
+|------|-----------|---------|
+| 400 | Validation failed | _pending_ |
+| 401 | Unauthorized | _pending_ |
+| 404 | Not found | _pending_ |
+
+---
+
+## API Versioning
+
+| Version | Base Path | Status | Notes |
+|---------|-----------|--------|-------|
+| _pending_ | _pending_ | current | _pending_ |
+
+## Authentication
+
+| Method | Header / Param | Scope |
+|--------|---------------|-------|
+| Bearer JWT | `Authorization: Bearer <token>` | _pending_ |