[TASK 5/5] Full Praetor Activation & Governance Lockdown: VMAFx/vmafx

[lusoris]

Scope

• Reconcile and lock branch protection rulesets via standardsctl sync.
• Transition .standards.yaml enforcement level to strict-zero-debt.
• Synthesize Paperclip agent harness (standardsctl paperclip harness).
• Configure ARC/fleet runner routing policy and enroll into bot gating webhook.

Depends-On: #1447

---

Part of Epic #1443 (https://api.github.com/repos/VMAFx/vmafx/issues/1443)

[lusoris]

.standards.yaml declines the branch ruleset (adoption.decline: branch-ruleset); the remote sync command hardcodes the branch main while this repository's default branch is master (praetor issue 71, still open); .standards.yaml has no enforcement-level field to set; the administrator bypass is kept on purpose in a single-maintainer repository (decision Q-010). Closing as not applicable here; the praetor-side gap is tracked upstream.