feat(framework): P1+P2 — public sanitization + blocking CI gate

Adds tools/quality/scripts/verify-sanitized.sh (two-class, self-tested) wired
blocking in .woodpecker/ci.yml; sanitizes operator identity from the public
framework package so the gate is green.

- purge jarvis/jason/woltje/PDA across 26 files -> generic
- delete jarvis-loop.json overlay; add neutral examples/{personas,overlays}
- relocate maintainer AUDIT to docs/audits/; delete 2 jarvis-brain rule blocks
- neutralize SOUL persona; strip "(Policy: Jason ...)" keeping universal rule
- test fixtures jason.woltje -> ci-bot (both git tests pass)

Deferred (tracked): private third-party host (uscllc) genericization.

Refs #542, closes #571

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

packages/mosaic/framework/defaults/TOOLS.md

@@ -66,12 +66,6 @@ starts, commits, PRs, test results, or file edits. At session start, `search` +
 prior context. MCP (`mcp__openbrain__capture/search/recent/stats`) preferred when connected; else
 REST/`tools/openbrain_client.py`. Full protocol: `guides/MEMORY.md`.
 
-**MANDATORY jarvis-brain rule:** when working in `~/src/jarvis-brain`, NEVER capture project data,
-meeting notes, status, timelines, or task completions to OpenBrain — the flat files
-(`data/projects/*.json`, `data/tasks/*.json`) are the SSOT (use `tools/brain.py` + direct JSON
-edits). OpenBrain there is for agent meta-observations ONLY (tooling gotchas, framework learnings,
-cross-project patterns). Violating this creates duplicate, divergent data.
-
 ## Git Providers
 
 | Host                | Instance         | CI                               |