chore(harness): make repository agent-ready

Add concise routed context, task-aware agent roles, focused skills, and structured learning promotion.\n\nUnify local development and workspace tooling, add layered test and E2E verification, harden MCP authentication, and gate deployment behind verification and explicit production promotion.

e2e/helpers/local-supabase.ts

@@ -0,0 +1,36 @@
+import { createClient } from '@supabase/supabase-js';
+
+export function localSupabase() {
+  const url = process.env.SUPABASE_URL;
+  const serviceKey = process.env.SUPABASE_SERVICE_ROLE_KEY;
+  if (!url || !serviceKey) throw new Error('Run E2E through npm run verify:e2e');
+  const host = new URL(url).hostname;
+  if (host !== '127.0.0.1' && host !== 'localhost') {
+    throw new Error(`E2E refuses non-local Supabase host: ${host}`);
+  }
+  return createClient(url, serviceKey, {
+    auth: { autoRefreshToken: false, persistSession: false },
+  });
+}
+
+export async function createRedemptionFixture() {
+  const client = localSupabase();
+  const nonce = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+  const email = `redeem-${nonce}@example.test`;
+  const code = `E2E-${nonce}`.toUpperCase();
+  const { data: created, error: userError } = await client.auth.admin.createUser({
+    email,
+    password: 'Sauci-e2e-only-2026!',
+    email_confirm: true,
+  });
+  if (userError || !created.user) throw userError ?? new Error('User creation failed');
+  const { data: redemptionCode, error: codeError } = await client.from('redemption_codes').insert({
+    code,
+    description: 'Playwright local fixture',
+    max_uses: 1,
+    is_active: true,
+    expires_at: new Date(Date.now() + 3_600_000).toISOString(),
+  }).select().single();
+  if (codeError) throw codeError;
+  return { client, email, code, userId: created.user.id, codeId: redemptionCode.id };
+}