[codex] Sync Work Ledger journal snapshot

[bnvoss]

Summary

Syncs /motus to the latest canonical Motus Work Ledger snapshot from motus-os/motus-work-ledger@82c1b981e97c8f7073bf126e9207b9c45d973e71 after motus-work-ledger PR #40.

This is a mechanical reference-implementation sync:

• updates MOTUS_WORK_LEDGER.lock.json to the new canonical commit,
• adds copied spec/work-journal.md,
• updates spec/MOTUS-WORK-LEDGER-RFC.md with the Work Journal contract link.

Change Recap

Field	Value
Work item	Closes #133
Mode	High-risk framework snapshot sync
Goal	Keep /motus aligned with canonical Work Ledger CTO-ready snapshot
Files changed	MOTUS_WORK_LEDGER.lock.json, spec/MOTUS-WORK-LEDGER-RFC.md, spec/work-journal.md
Validation	snapshot guard, conformance checks, targeted pytest, full gates
Review evidence	Independent read-only headless review by Godel approved with no findings
Confidence before	96% after canonical PR #40 merge
Confidence after	98% for mechanical sync correctness after full gates and review
Open risks	Existing moderate Dependabot vulnerability remains tracked separately by PR #132/security alert

Validation

• python3 packages/cli/scripts/ci/check_work_ledger_snapshot.py PASS
• python3 conformance/validator/check_schema_registry.py PASS
• python3 conformance/validator/check_semconv_schema_map.py PASS
• python3 conformance/validator/check_conformance.py PASS
• python3 -m pytest packages/cli/tests/test_framework_conformance.py packages/cli/tests/test_docs_taxonomy_lock.py -q PASS, 17 passed
• git diff --check PASS
• bash scripts/gates/run-all-gates.sh PASS, 17/17 gates with 299 tests and 56 failure-mode tests

Independent Review

Read-only headless reviewer: Godel (019e4aab-6769-7de3-9fc6-74a8095e5b28)

Verdict: APPROVED

Reviewer confirmed:

• staged diff only touched MOTUS_WORK_LEDGER.lock.json, spec/MOTUS-WORK-LEDGER-RFC.md, and spec/work-journal.md,
• upstream PR Release 0.3.3: align version surfaces #40 was merged at commit 82c1b981e97c8f7073bf126e9207b9c45d973e71,
• upstream raw hashes for copied files matched the staged lock,
• no staged changes under schemas/, semconv/, or conformance/,
• snapshot guard and targeted gates passed,
• read-only status confirmed.

Notes

Push reported one existing moderate vulnerability on the default branch. This appears separate from this docs/snapshot sync and is already represented by the open Dependabot PR #132.