Implement HFS v2 Data Agent Panel thin wrapper

[BlueSkyXN]

HFS v2 delivery profile

• lane: source
• sovereignty: sovereign
• production Space: BlueSkyXN/Data-Agent-Panel-HFS
• candidate Space: BlueSkyXN/Data-Agent-Panel-HFS-v2-candidate
• rollback Git baseline: cd7e1d561f785542a551607fa25014a506423724

Summary

• commit the reviewed HFS v2 manifest, wrapper/exporter, workflows, tests, and no-secret templates
• enforce immutable source/artifact provenance and fail-closed deployment boundaries
• keep remote writes manual, allowlisted, and followed by readback

Validation

• static contract and clean wrapper export; alignment 0 ERROR
• independent clean-worktree validation and actionlint passed

Remote gates not covered by this PR

• GitHub-hosted build/CI result at the exact PR head
• artifact or source-wrapper publication readback
• candidate/production Space build, health, business smoke, persistence, backup, and isolated restore
• seven-day observation and legacy-resource cleanup

Owner gates

No automatic merge, production cutover, Space cleanup, bucket deletion, or Settings pruning is authorized by this PR.