fix(ci): address review - align the gate's labels with what it counts

CodeRabbit raised three findings on the first commit. All three are correct.

1. The step summary reported the combined .a2ml+.deed count as ".a2ml file(s)",
   and the scorecard row was renamed to "DEED manifest" while its status still
   came from a find matching .a2ml too - so a repo holding only legacy manifests
   scored a green DEED row. That is a label asserting one thing while its check
   asks another, which is the exact defect class this branch exists to cure.
   Fixed by aligning the LABELS to the check rather than narrowing the check:
   narrowing to .deed only would red-score essentially every repo in the estate
   today (19,477 tracked .a2ml against 15 .deed), and this branch is
   behaviour-neutral by design.

2. Both find sites now pass -type f. A directory named *.deed is not a manifest.

3. The validator's structural-identity exemption no longer waives the schema
   version for .deed. DEED is the live, grammar-bearing format; legacy .a2ml
   keeps the exemption. Proved by control: two files in one machine-readable
   directory differing only by extension now get different verdicts.

Severity is unchanged (warning, and the gate invokes strict:false), so no repo
can turn red on this.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0168Bgpez8mFBcAqYAj8VgEx

Author: hyperpolymath

.githooks/validate-a2ml.sh

@@ -281,7 +281,12 @@ validate_a2ml() {
             "Missing required identity field (agent-id, name, or project)"
     fi
 
-    if [[ "$has_version" == "false" && "$is_manifest" == "false" && "$is_contractile_shape" == "false" && "$is_structural_identity" == "false" ]]; then
+    # DEED is the live, grammar-bearing format: its schema version is required even
+    # under a machine-readable tree. The structural-identity exemption below stays
+    # scoped to legacy *.a2ml, which is no longer authored. (CodeRabbit, PR review.)
+    local version_exempt_structural="$is_structural_identity"
+    case "$file" in *.deed) version_exempt_structural=false ;; esac
+    if [[ "$has_version" == "false" && "$is_manifest" == "false" && "$is_contractile_shape" == "false" && "$version_exempt_structural" == "false" ]]; then
         report_issue "warning" "$file" 1 \
             "Missing version or schema_version field"
     fi

.github/workflows/dogfood-gate.yml

@@ -33,7 +33,7 @@ jobs:
       - name: Check for A2ML files
         id: detect
         run: |
-          COUNT=$(find . \( -name '*.a2ml' -o -name '*.deed' \) -not -path './.git/*' | wc -l)
+          COUNT=$(find . -type f \( -name '*.a2ml' -o -name '*.deed' \) -not -path './.git/*' | wc -l)
           echo "count=$COUNT" >> "$GITHUB_OUTPUT"
           if [ "$COUNT" -eq 0 ]; then
             echo "::warning::No .deed manifest files found. Every RSR repo should have 0-AI-MANIFEST.deed (.a2ml is legacy and no longer authored)"
@@ -56,7 +56,7 @@ jobs:
           else
             echo "## A2ML Validation" >> "$GITHUB_STEP_SUMMARY"
             echo "" >> "$GITHUB_STEP_SUMMARY"
-            echo "Scanned **${A2ML_COUNT}** .a2ml file(s). See step output for details." >> "$GITHUB_STEP_SUMMARY"
+            echo "Scanned **${A2ML_COUNT}** manifest file(s) (.deed, or legacy .a2ml). See step output for details." >> "$GITHUB_STEP_SUMMARY"
           fi
 
   # ---------------------------------------------------------------------------
@@ -245,7 +245,7 @@ jobs:
           MAX=5
 
           # A2ML manifest present?
-          if find . \( -name '*.a2ml' -o -name '*.deed' \) -not -path './.git/*' | head -1 | grep -q .; then
+          if find . -type f \( -name '*.a2ml' -o -name '*.deed' \) -not -path './.git/*' | head -1 | grep -q .; then
             SCORE=$((SCORE + 1))
             A2ML_STATUS=":white_check_mark:"
           else
@@ -291,7 +291,7 @@ jobs:
 
           | Tool/Format | Status | Notes |
           |-------------|--------|-------|
-          | DEED manifest (0-AI-MANIFEST.deed) | ${A2ML_STATUS} | Required for all RSR repos |
+          | AI manifest (0-AI-MANIFEST.deed, or legacy .a2ml) | ${A2ML_STATUS} | Required for all RSR repos |
           | K9 contracts | ${K9_STATUS} | Required for repos with config files |
           | .editorconfig | ${EC_STATUS} | Required for all repos |
           | Groove endpoint | ${GROOVE_STATUS} | Required for service repos |