boss: migration pilot — autonomous orchestrator mode generalised

First skill migrated from AILang's in-tree skills/. boss carries
the autonomous orchestrator authority (god-mode: dispatches every
other skill, decides done-state vs bounce-back), so it is the
load-bearing pilot for the migration pattern.

Profile schema gains three slots that boss needs:

- `git.issue_tracker.url`       — browsable issue list URL
- `git.issue_tracker.list_cmd`  — shell command listing open issues
- `notifications.command`       — script invoked on done-state /
  bounce-back; falls back to chat if empty

AILang-specific bits dropped from the prose:
- AILang/Gitea URL + tea CLI hardcoding → profile slots
- `design/contracts/0004-feature-acceptance.md` cross-reference
  → project CLAUDE.md (not the plugin's concern)
- "Boss" terminology → "orchestrator" (the plugin term; "Boss"
  was AILang vocabulary)
- "Brummel-as-LLM" → "the orchestrator"
- "milestone" → "cycle" (the profile's vocabulary slot)

Universal substance preserved verbatim: Iron Law, the five
process steps, the four bounce-back triggers + new-cycle
rationale, notification protocol, done-state editorial rules,
Common Rationalisations, Red Flags. No discipline-prose compression.

design/out-of-scope claim retracted: boss DOES generalise, and
its body now demonstrates how — the queue mechanic is a single
shell-command slot, not a transport-coupled contract.

skills/README.md flags boss as the landed pilot; the other seven
skills follow once the pattern is approved.

docs/design.md

@@ -108,13 +108,9 @@ The relationship:
 
 ## What's out of scope for this plugin
 
-- **Boss/autonomous-orchestrator mode**: AILang's `boss` skill
-  is gated to a user-invoked `/boss` for autonomous queue
-  execution. Whether that generalises across projects is
-  unclear (queue mechanics depend on issue-tracker semantics).
-  Not in the initial skeleton; possibly added later as
-  `skills/boss/` if a cross-project autonomous mode crystallises.
 - **Issue-tracker integration**: the plugin can read the
-  profile's `issue_tracker.kind` and adjust commit-marker
-  suggestions, but does not directly call Gitea / GitHub /
-  Linear APIs.
+  profile's `issue_tracker.kind` and `issue_tracker.list_cmd`
+  and invoke the configured listing command, but does not
+  directly call Gitea / GitHub / Linear APIs. The `boss` skill
+  uses the configured shell command for queue reads, so the
+  plugin remains transport-agnostic.