feat: brain-template v2.0 — BSI-v3 complet + tiers documentés

- README reécrit : tiers free/pro/full + modèle clé API + multi-instance
- Sync agents/ (57 agents, kernel-isolation validated)
- Sync scripts/ BSI-v3 (file-lock, preflight, human-gate, brain-status)
- KERNEL.md v0.7.0 — zones + délégation + rendering + isolation
- brain-compose.yml v0.7.0 — rendering mode + kerneluser
- workflows/ — template + brain-engine exemple
- locks/.gitkeep + claims/.gitkeep
- helloWorld : RAG boot tier full only (bsi-rag retiré du template)

workflows/_template.yml

@@ -0,0 +1,46 @@
+# workflows/_template.yml — Template workflow thématique
+# Copier + renommer : cp workflows/_template.yml workflows/<theme>.yml
+# Lancer le premier step : bash scripts/workflow-launch.sh workflows/<theme>.yml
+
+name: <theme-slug>          # ex: brain-engine-be7
+branch: theme/<theme-slug>  # branche git dédiée — créer avec theme-branch-open.sh
+pilote: <sess-id>            # renseigné au lancement (sess-id de la session pilote)
+
+# ---
+# chain : séquence de satellites dans l'ordre d'exécution
+# Chaque step est traduit en claim BSI par workflow-launch.sh
+# ---
+
+chain:
+
+  - step: 1
+    type: code               # satellite_type : code | brain-write | test | deploy | search
+    scope: <scope>/          # dossier ou fichier cible
+    story_angle: "<description courte de la tâche>"
+    # gate absent → proceed si result.status = ok
+
+  - step: 2
+    type: test
+    scope: <scope>/
+    story_angle: "Tests <scope>"
+    gate: 0-failures         # proceed uniquement si result.tests.failed = 0
+
+  - step: 3
+    type: brain-write
+    scope: <fichier>.md
+    story_angle: "Documenter <livrable>"
+    # gate absent → proceed si result.status = ok
+
+  - step: 4
+    type: deploy
+    scope: vps/
+    story_angle: "Déployer <livrable>"
+    gate: human              # pause — confirmation humaine avant deploy
+
+# ---
+# Gates disponibles (transition vers le step suivant) :
+#   absent       → proceed si result.status = ok
+#   0-failures   → proceed si result.tests.failed = 0 (step type:test uniquement)
+#   human        → pause + confirmation avant de lancer le step suivant
+#   never        → chaîne s'arrête ici (step terminal)
+# ---

workflows/brain-engine.yml

@@ -0,0 +1,30 @@
+# workflows/brain-engine.yml — Workflow Brain Engine (BE-X)
+# Usage : bash scripts/workflow-launch.sh workflows/brain-engine.yml [--step N]
+
+name: brain-engine
+branch: theme/brain-engine
+pilote: ~   # renseigné au lancement
+
+chain:
+
+  - step: 1
+    type: code
+    scope: brain-engine/
+    story_angle: "Implémenter la feature BE-X"
+
+  - step: 2
+    type: test
+    scope: brain-engine/
+    story_angle: "Tests BE-X — suite complète"
+    gate: 0-failures
+
+  - step: 3
+    type: brain-write
+    scope: brain-engine/README.md
+    story_angle: "Mettre à jour README brain-engine"
+
+  - step: 4
+    type: deploy
+    scope: vps/
+    story_angle: "Déployer brain-engine sur VPS"
+    gate: human