docs: add service README.md files + update AGENTS.md decisions

- Create README.md for 25+ service modules with container info, API surface, storage
- Document attestor-tileproxy separation rationale (air-gap network isolation)
- Document opsmemory-advisoryai separation rationale (resource isolation, blast radius)
- Update Timeline AGENTS.md with merged indexer info

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/SmRemote/README.md

@@ -0,0 +1,17 @@
+# SmRemote
+
+**Container(s):** stellaops-smremote (via docker-compose.crypto-provider.smremote.yml overlay)
+**Slot:** 31  |  **Port:** TBD  |  **Consumer Group:** TBD
+**Resource Tier:** light
+
+## Purpose
+SmRemote provides Chinese national cryptography (SM2/SM3/SM4) signing and verification as a remote service. It wraps the SM-Soft crypto provider plugin and exposes sign/verify operations over HTTP for air-gapped or HSM-backed deployments where the crypto provider cannot run in-process.
+
+## API Surface
+- `smremote` (via Router) — SM2 sign, SM2 verify, key info queries
+
+## Storage
+None (stateless crypto service)
+
+## Background Workers
+None