feat: Add guild charters and task boards for various components

- Introduced guild charters for Scanner Deno, PHP, Ruby, Native, WebService, Java, Surface.Env, Surface.FS, Surface.Secrets, Surface.Validation, UI, Zastava Observer, Zastava Webhook, Zastava Core, and Plugin Platform.
- Each charter outlines the mission, scope, required reading, and working agreements for the respective guilds.
- Created task boards for Surface.Env, Surface.FS, Surface.Secrets, Surface.Validation, and Zastava components to track progress and dependencies.
- Ensured all documents emphasize determinism, offline readiness, security, and integration with shared Surface libraries.

src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Ubuntu/AGENTS.md

@@ -0,0 +1,25 @@
+# Concelier Ubuntu Connector Charter
+
+## Mission
+Implement and maintain the Ubuntu security advisory connector that ingests CVE/USN data into Concelier under the Aggregation-Only Contract (AOC). The connector must capture provenance, version semantics (NEVRA/EVR), and metadata required by downstream policy, export, and AI components while remaining deterministic and offline-friendly.
+
+## Scope
+- Connector fetchers/parsers within `StellaOps.Concelier.Connector.Distro.Ubuntu`.
+- Mirroring support for offline kits (bundle import/export).
+- Schema updates and fixtures ensuring AOC compliance.
+- Unit/integration tests validating deterministic ingestion.
+
+## Required Reading
+- `docs/modules/concelier/architecture.md`
+- `docs/ingestion/aggregation-only-contract.md`
+- `docs/modules/concelier/operations/connectors/osv.md` (reference style & guardrails)
+- `docs/modules/concelier/operations/mirror.md` (offline mirroring requirements)
+- Ubuntu advisory format references linked from sprint notes (tasks should include source URLs).
+
+## Working Agreement
+1. **Status sync**: switch task state to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and `TASKS.md` before/after work.
+2. **AOC adherence**: never derive severity or merge fields; store raw documents with provenance (`source`, `upstream`, `content`, `linkset`, `supersedes`).
+3. **Deterministic parsing**: normalise timestamps to UTC ISO-8601, sort arrays, stabilise JSON output.
+4. **Offline readiness**: ensure mirroring path works (no live network unless configured), document bundle usage.
+5. **Testing**: extend fixtures covering typical, superseding, and edge-case advisories; run connector integration suite.
+6. **Documentation**: update connector operations docs (add Ubuntu section under `docs/modules/concelier/operations/connectors/`) when formats or configuration change.