feat: add Otito trust integration for Herdr

[nugehs]

Summary

• add a local-first Herdr plugin for Otito context, impact, review, doctor, and exact staged-tree validation
• add an interactive trust-status popup with responsive information tables, accessible Bashbop colours, semantic status signals, and NO_COLOR support
• document installation, usage, authority boundaries, and site navigation; add focused integration tests and lint coverage

Change Type

• Bug fix
• Feature
• Documentation
• Tests or CI
• Refactor

Validation

• npm run ci
• PullPass readiness passed or its WARN/FAIL state is explained.
• Focused tests or manual checks: node --test tests/herdr-plugin.test.js (5/5 passed); plain and ANSI presentation paths covered

Version Impact

• None: docs, tests, CI, or internal-only change
• Patch: bug fix or low-risk internal improvement
• Minor: new command, MCP tool, report field, or backward-compatible behavior
• Major: removed command, renamed field, incompatible output, or runtime requirement change

Review Notes

• I kept generated artifacts under .otito/ out of the commit.
• I updated README, skill docs, or eval metadata for command, package script, MCP tool, schema, or output changes.
• I identified any skipped checks or follow-up work below.
• I understand this PR needs maintainer/code-owner approval before merge.

Notes:

• Full local CI passed: formatting, lint, typecheck, SemVer check, 403 tests, coverage thresholds, accuracy/harness/gate evaluations, dependency audit, doctor, harness, and tarball smoke.
• The exact staged-tree Otito gate returned WARN only because integration/configuration files require explicit maintainer review. Secret safety, release discipline, validation availability, dependency-audit availability, and local commit readiness passed.
• Local evidence does not prove hosted CI, CODEOWNERS approval, unresolved review conversations, or the human merge decision.
• Live herdr plugin link and popup launch were not performed because this Codex process is outside a Herdr-managed pane (HERDR_ENV is unset). The renderer, plain fallback, ANSI palette, tables, and action bar are covered by focused tests.