chore: update gaze scaffolding and constitution for unbound-force v0.16.0

[yvonnedevlinrh]

Summary

Update the gaze repo to align with unbound-force v0.16.0. uf init --force handles the bulk of the work — this issue tracks that step plus the manual follow-ups init cannot touch.

Tasks

1. Run uf init --force

This single command handles ~80% of the update:

• Overwrites all tool-owned files with v0.16.0 content (commands, skills, canonical convention packs, OpenSpec schemas, Speckit framework)
• Stamps v0.16.0 version markers (replacing vdev)
• Deploys skills into .opencode/skills/ (currently empty dirs) — always-on-guidance, pre-flight, review-context, speckit-workflow
• Refreshes DCP config (.opencode/dcp.jsonc)
• Cleans up legacy command names (pre-uf. namespace prefix)
• Re-initializes sub-tools (Dewey, Specify, OpenSpec)

2. Constitution alignment (manual — NEVER-OVERWRITE)

.specify/memory/constitution.md is protected from --force.
Manual updates required:

• Add parent_constitution reference to org v1.2.0 (Gaze constitution v1.3.0 has hero-specific principles
  but should reference the org constitution it extends)
• Add Principle V: Security by Default alignment section or verify existing principles don't conflict with org v1.2.0
• Review Testability principle for alignment with org Principle IV wording
• Bump constitution version (currently v1.3.0)

3. Add permission gates to opencode.json

The org repo now enforces granular bash permissions (#477, #493). Gaze currently has no permission gates. Add:

• gh issue / gh pr mutation gates
• git push gate
• rm safety gate

4. CI action pin audit

Review .github/workflows/test.yml, mega-linter.yml, and release.yml for stale action SHAs. Verify alignment with org-level pins:

• actions/checkout → v7.0.1 SHA
• actions/setup-go → v7.0.0 SHA
• org-infra reusable workflows → latest SHA

5. Verify stale agent refs

After init, check user-owned agent files (21 files including gaze-reporter, gaze-test-generator, reviewer-testing) for references to old command names (pre-uf. prefix). Init warns but does not auto-fix these.

6. Clean up empty skill directories

Gaze currently has empty .opencode/skills/ and .opencode/skill/ directories. After uf init --force deploys
the 4 scaffolded skills, verify they landed correctly and remove any leftover empty dirs.

Context

Release: https://github.com/unbound-force/unbound-force/releases/tag/v0.16.0
Current constitution: v1.3.0 (no explicit parent ref to org constitution)