fix: refactor AGENTS.md into progressive-disclosure structure (#184)

- Root AGENTS.md: 350+ lines → 68 lines (map, not encyclopedia)
- New docs/dev-environment.md (67 lines): Docker, dev.sh, ports, pitfalls
- New docs/ci-pipeline.md (73 lines): Woodpecker setup, monitoring, debugging
- New docs/testing.md (41 lines): Foundry, E2E, version validation
- New docs/codeberg-api.md (32 lines): .netrc auth, API usage
- Updated stale model refs in .claude-code-supervisor.yml files
- Sub-component AGENTS.md files unchanged
- Context docs (PRODUCT-TRUTH, ARCHITECTURE, UX-DECISIONS) unchanged

docs/codeberg-api.md

@@ -0,0 +1,32 @@
+# Codeberg API Access
+
+## Authentication
+Codeberg API tokens are stored in `~/.netrc` (standard `curl --netrc` format, `chmod 600`):
+```
+machine codeberg.org
+login johba
+password <api-token>
+```
+The `password` field holds the API token — this is standard `.netrc` convention, not an actual password.
+
+## Generating Tokens
+Generate tokens at `https://codeberg.org/user/settings/applications`.
+
+## Usage
+Pass `--netrc` to curl for authenticated Codeberg API calls:
+```bash
+# List issues
+curl --netrc -s https://codeberg.org/api/v1/repos/johba/harb/issues | jq '.[0].title'
+
+# Get a specific issue
+curl --netrc -s https://codeberg.org/api/v1/repos/johba/harb/issues/42 | jq '.title, .body'
+
+# List pull requests
+curl --netrc -s https://codeberg.org/api/v1/repos/johba/harb/pulls | jq '.[].title'
+```
+
+## Git vs API
+The repo uses SSH for git push/pull (`ssh://git@codeberg.org`), so `.netrc` is only used for REST API interactions (issues, PRs, releases).
+
+## Webhooks
+Codeberg sends webhooks to `https://ci.sovraigns.network/api/hook` to trigger Woodpecker CI pipelines. If webhooks stop firing (e.g. DNS issues), check Codeberg repo settings → Webhooks to verify delivery history and re-trigger.