chore(docs+devops): cross-module doc sync + sprint archival moves + compose updates

Bundled pre-session doc + ops work:
- docs/modules/**: sync across advisory-ai, airgap, cli, excititor,
  export-center, findings-ledger, notifier, notify, platform, router,
  sbom-service, ui, web (architectural + operational updates)
- docs/features/**: updates to checked excititor vex pipeline,
  developer workspace, quick verify drawer
- docs top-level: README, quickstart, API_CLI_REFERENCE, UI_GUIDE,
  code-of-conduct/TESTING_PRACTICES updates
- docs/qa/feature-checks/: FLOW.md + excititor state update
- docs/implplan/: remaining sprint updates + new Concelier source
  credentials sprint (SPRINT_20260422_003)
- docs-archived/implplan/: 30 sprint archival moves (ElkSharp series,
  misc completed sprints)
- devops/compose: .env + services compose + env example + router gateway
  config updates

File-level granularity preserved.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

docs/modules/excititor/implementation_plan.md

@@ -8,7 +8,8 @@ Provide a living plan for Excititor deliverables, dependencies, and evidence.
 - Update this file when new scoped work is approved.
 
 ## Near-term deliverables
-- TBD (add when sprint is staffed).
+- `SPRINT_20260420_001_Concelier_excititor_verification_runtime_no_stub_fallbacks.md`: retire the live Excititor verification fallback path so enabled signature verification requires a real IssuerDirectory URL and only uses Valkey when explicitly configured.
+- `SPRINT_20260420_002_Cli_evidence_linking_no_inmemory_store.md`: remove the CLI/runtime in-memory `IVexEvidenceLinkStore` fallback so `stella vex gen --link-evidence` only runs when real Excititor PostgreSQL persistence is configured.
 
 ## Dependencies
 - `docs/modules/excititor/architecture.md`