feat: Claude Code Monitor — lanes, pipelines and a merged workspace

Internal SmartGift build of a Claude Code monitoring dashboard.

Lanes: a durable unit of parallel agent work, one per working directory,
tracked across session restarts. Managed lanes are git worktrees the
dashboard provisions and can reset or remove behind a three-check destroy
guard and a counted preflight; adopted lanes are directories you already
own and are never destroyable.

Pipelines: a lane moves through pipeline stages. A stage the agent declares
with evidence renders green; a stage inferred from the tool-event stream
renders dashed amber and never counts as done. Detection is forward-only
within a 30-minute window, and never writes the declared stage.

Workspace: one page at /run with a lane grid, the selected lane's pipeline,
and a full Claude console behind a disclosure.

.codex/skills/mcp-maintainer/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: mcp-maintainer
+description: Operate and maintain the local MCP server for this repository. Use for MCP tool updates, policy-guard changes, host configuration, and MCP runtime troubleshooting.
+---
+
+# MCP Maintainer Skill
+
+## Workflow
+- Confirm dashboard API availability (`/api/health`).
+- Inspect affected MCP domain modules under `mcp/src/tools/domains/`.
+- Preserve safety gates in `mcp/src/policy/tool-guards.ts`.
+- Validate with `npm run mcp:typecheck` and `npm run mcp:build`.
+
+## Safety rules
+- Keep loopback-only target checks enabled.
+- Keep mutating and destructive tools behind explicit flags.
+- Do not log protocol data to stdout.
+
+## References
+- `references/tool-domain-map.md`
+- `references/operations-runbook.md`