chore(policy): adopt organization instruction routing

[ss-o]

Summary

Deliver the generated organization routing block in AGENTS.md and add the immutable reusable Org Routing workflow on main. The caller uses organization revision 1becebb7b98dab717d82897428afafd792d4fb97; declared vendored skills match the approved inventory at that revision. Repository-specific instructions are preserved.

Refs z-shell/.github#665. This pull request covers this repository's initial delivery; the wider rollout and enforcement remain open.

Verification

• Published organization scripts/org-routing.py check passed against a clean source snapshot for z-shell/src.
• Scoped trunk check --no-fix, workflow actionlint and Git diff hygiene passed.
• Hosted checks and runtime instruction/skill discovery remain unverified at opening.

Agent handoff

Ready for hosted validation and review of record. After landing and observing a successful caller, verify the exact hosted check name before requiring it in branch rules. Delivery does not by itself prove runtime selection or semantic compliance.

[cloudflare-workers-and-pages]

Deploying src with    Cloudflare Pages

Latest commit:	4453d57
Status:	✅  Deploy successful!
Preview URL:	https://cd5d87b7.zi-src.pages.dev
Branch Preview URL:	https://feature-665.zi-src.pages.dev

View logs

[ss-o]

Post-merge review of head 4453d577b6ccf4b36221115795e829f27d8368d5.

One cosmetic finding. AGENTS.md:29 (outside the generated markers) joined the first two lines of the trunk-based development bullet into one line of about 150 columns, leaving a dangling "main." continuation. The file is otherwise wrapped at 80 columns; restoring the original two-line wrap fixes it. Tracked for the next change here, no follow-up needed on its own. The zi-install skill re-pin to approved 1bfbf33a545c is correct: the previous copy had drifted from the revision it named.

Checked after merge: scripts/org-routing.py check from z-shell/.github main (15d8e2e1) on an export of this head reports routing current (generated block byte-identical, declared surfaces present, no undeclared carriers, vendored skill digests match lib/approved-skills.json). .github/workflows/org-routing.yml is byte-identical to the merged zi#570, F-Sy-H#193 and z-a-eval#12 callers (full-SHA pin, contents: read, no caller concurrency since the reusable workflow sets its own). No added line carries U+2014 or attribution text.