Promote the Hub Resync to Main - #601

## Summary

CI is red on both `develop` and `main`. The runner's .NET SDK 10.0.404
reports CA2027 as an error twice in `UtilitiesTests/LoopbackServer.cs`.
The flagged lines are the two teardown waits in `Dispose()`, each shaped
`Task.WhenAny(task, Task.Delay(timeout))`, where the delay's timer
outlives the task it races. This blocks every pull request, including
the hub resync in #597 and the `main` Dependabot bump in #596.

Each wait is now `Task.WaitAny([task], timeout)`. It is bounded by the
same timeout, never rethrows a faulted or canceled task, and leaves no
timer behind. So the existing teardown contract and its comment still
hold, and the `_ = task.Exception` lines after each wait still observe
any fault. The change is test-only, so no packaged code changes.

`main` takes its own dependency bumps here, so the same two-line change
is opened against both branches.

## Verification

- `dotnet build` passes with zero warnings and zero errors, and `dotnet
format style --verify-no-changes` is clean.
- `dotnet test` passes 212 of 212.
- CA2027 reproduced locally before the change and is gone after it.
- Local strict review ran three passes. The first flagged two added
comments the prose gate refuses, and they were removed. The second
pointed out that `Task.WaitAny` already does what a hand-built helper
did, so the helper went. The final pass over the two-line change found
nothing.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

## Summary

Resyncs the carried instruction set and the Skills tree with hub
`ptr727/ProjectTemplate` at `009d3e5e`. This is step 1 of the hub's
`RESYNC.md`, together with step 3's re-vendor of the manifest-owned
trees, which that file puts in the same pull request.

- `AGENTS.md`, `GOVERNANCE.md`: the stale verbatim sections are
re-vendored with `scripts/carry.py apply-sections`. The repository's own
preamble, "Devcontainer", and "Repository Layout" text is unchanged.
- `CODESTYLE.md`, `.github/copilot-instructions.md`: the hub's changes
since the last sync (`c175d557`) are merged three-way. This repository's
"Utilities .NET Conventions" section, its `OPERATIONS.md` pointers, and
its own "Disproved Claims" ledger line all stay.
- `WORKFLOW.md`, `AUDIT.md`: replaced with the hub copies. Each old copy
matched the last-synced hub exactly and had nothing of its own.
- `.github/skills/`: the hub's generated tree, carried with
`scripts/carry.py apply`. This adds `update-host` and refreshes every
skill that matched a past hub revision. No skill directory was renamed
or removed, so the skill paths in `.github/copilot-instructions.md` stay
valid.

`CLAUDE.md` already matched the hub. This closes every `verbatim:` and
`tree:` finding from `audit run 2026-11-12T22:11:18Z | hub 009d3e5e`,
along with the `intent` advisories on `AGENTS.md`, `GOVERNANCE.md`,
`CODESTYLE.md`, `WORKFLOW.md`, `AUDIT.md`, and
`.github/copilot-instructions.md`. Auditing this branch (`audit run
2026-11-12T22:15:07Z | hub 009d3e5e | branch override
resync/hub-009d3e5e-instructions`) reports 0 findings except three
intent advisories, which the follow-up handles.

## Follow-Up

Once this merges, a separate intent-files pull request will bring
`global.json` in line with the hub's SDK-line selection, and move the VS
Code Lint tasks onto `docker_lint.py` through `hub_fetch_run.py`.

## Verification

- markdownlint-cli2 and editorconfig-checker pass across the tree. The
prose gate passes at both the pinned hub SHA and hub `main`, and the
repo gate reports nothing.
- Local strict review ran one pass over the full diff and found nothing.
The pass checked that each merged file's change matches the hub's own
change over the same range, and that `.github/skills/` is byte-identical
to the hub's tree.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

## Summary

This is step 6 of the hub resync to `ptr727/ProjectTemplate` at
`009d3e5e`: the intent files, brought in line by hand. It follows #597,
which carried the instruction set and the Skills tree.

- `global.json`: gains the hub snippet's `sdk` block, `10.0.100` with
`rollForward: latestFeature`, and keeps the repository's own
`test.runner`. A host with a newer SDK installed alongside .NET 10 now
builds on .NET 10, as CI does. `CODESTYLE.md`, carried in #597, already
describes the root `global.json` as selecting the SDK line. Before this
change, a host with SDK 11 installed built with SDK 11.
- `.vscode/tasks.json`: the Lint group now matches the hub snippet. The
EditorConfig, Workflows, Markdown, and Spelling tasks run through the
hub's `scripts/docker_lint.py`. `Lint: Prose` (whole repository) and
`Lint: EOL` are new. This matches `GOVERNANCE.md` "Editor and Tasks".
Two local adaptations:
- The snippet's pre-commit comment line is rewritten, since this
repository's hook runs only the .NET formatters.
- `Lint: All` runs EOL before Prose. A sequence stops at its first
failing task, and whole-repo Prose reports findings that predate this
change.
  - Both snippet issues are reported on hub #3536.
- `hub_fetch_run.py`: new at the root, byte-identical to the hub's
`catalog/snippets/hub_fetch_run.py`.
- `OPERATIONS.md`: describes the SDK pin, including that every host now
needs a .NET 10 SDK. It lists the helper and describes how each Lint
task runs. A two-sentence comment in `.vscode/tasks.json` is split, per
the comment rules.

This PR adds comment lines, all carried from the hub snippet or the
helper, so it carries the `comments` label.

This closes the `intent` advisory on `global.json` from `audit run
2026-11-12T22:11:18Z | hub 009d3e5e`. The advisories on `version.json`
and `.editorconfig-checker.json` are date-only, because their canonicals
changed before the last sync, and their content is the repository's own.

## Verification

- With SDK 11.0.100 and 10.0.404 both installed, `dotnet --version` now
reports 10.0.404. On that SDK, `dotnet build` passes with zero warnings
and `dotnet test` passes 212 of 212.
- Each Lint task's command was run by hand, and all six execute.
EditorConfig, Workflows, Markdown, Spelling, and EOL pass. Whole-repo
Prose reports findings only in files this change does not touch. The CI
gate is diff-scoped, so those findings do not affect it.
- The diff-scoped prose gate (with comments allowed) and markdownlint
pass.
- Local strict review ran three passes over the full diff. The first
found two overstatements in `OPERATIONS.md` and the Lint: All ordering.
The second found that the SDK-pin sentence hid the .NET 10 requirement.
All of these are fixed here, and the final pass found nothing.

## Findings Routed to the Hub

- `.vscode/tasks.json` `Lint: All` ordering, raised by a local pass. The
hub snippet runs `Lint: Prose` before `Lint: EOL` under a stopping
sequence, so a carrier with whole-repo prose findings never reaches EOL.
That is canonical content, so it is declined here and reported on
ptr727/ProjectTemplate#3536. This copy runs EOL first meanwhile.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>