docs: specify Genesis/Managed bootstrap execution and promotion (NO_BUMP)

[pcvantol]

Owner-authorized documentation scope

Companion to Forge #133. The owner requested a complete project bootstrap design for BOTH Genesis and Managed, owner-specific roadmaps/DAGs and protected merges. This PR defines only EP's effects/admission/receipt/registration side.

Adds the detailed execution contract, seven PLANNED owning nodes with a non-executable DAG, and navigation from Genesis Mode and BOOTSTRAP. Reuses existing B8R and Genesis/Managed/P-TRANSPORT primitives. Covers reserved versus committed identity, scoped authority before project registration, local-only Genesis, empty remote birth without a fabricated PR/protection bypass, protected adoption, real governance readback, explicit history-safe promotion and same-operation failure recovery.

No runtime code, schema migration, endpoint, workflow, permission, credential, package version, release or Mission change. The root roadmap is retained; the new scoped roadmap is an explicit linked decomposition of its existing attachment/provisioning/contract seams. Existing EP #271 and #272 are not modified or merged by this documentation PR.

Integration

Forge semantic contract: #133, branch codex/project-bootstrap-manifest-v1.
Workspace companion: branch codex/project-bootstrap-onboarding-v1.
Shared PB-01..PB-40 qualification families remain planned tests, not evidence of installed implementation.

Validation

Exact candidate CI and documentary cross-product review pending at creation. No local full repository suite or installed runtime proof claimed. Protected merge waits for actual applicable checks and authorization gates; no bypass.

[pcvantol]

Pre-merge documentary review on 869bf426baf174eaac02bf79ac7c0ec2839e1022: companion Forge #133 (127751f…) and Workspace #34 (22932f5…) cover all five create/adopt/promote journeys. The EP design preserves B8R's committed-declaration authority: pre-commit IDs are operation reservations only. Local Genesis has no remote effects; Managed birth cannot bypass an existing protected base; promotion preserves identity/history and requires explicit disclosure/governance proof. No current runtime operation or schema is introduced.

Local documentary validation matched the three exact remote DAG blob hashes and proved all 22 PB nodes/dependencies acyclic, with no Workspace prerequisite for headless closure. This is author-side design review, not an independent runtime assurance receipt.

GitHub validation 35225268109 is successful, including validate and trusted-delivery evidence; CodeQL, security baseline, Golden Qualification, TDE observe and Owner Authorization succeeded. Browser/localization jobs were skipped under the existing documentation profile; no installed new-bootstrap/UI qualification is claimed. Existing #271/#272 branches, package version and live operations remain untouched. Owner requested the protected merge of this documentation.