Mirror tool surfaces and reverify current CI path

[maruwork]

Summary

• move example tool surfaces under tool-surfaces/
• align current repo workflow/import state with the verified CI path
• add the completion contract and current scan coverage checks

Verification

• python -m py_compile shared/python/adop_cli.py shared/python/adop_html.py shared/python/adop_artifacts.py shared/python/adop_validation.py shared/python/adop_types.py shared/python/adop_summary.py shared/python/adop_sync.py shared/python/adop_ids.py shared/python/adop_state_machine.py shared/python/common.py
• python -m pytest tests/ -q -n auto --basetemp C:\Users\f_tan\project\adop\workspace\tmp\current-checkout-proof\workspace\tmp\pytest-mirror -o cache_dir=C:\Users\f_tan\project\adop\workspace\tmp\current-checkout-proof\workspace\tmp\pytest-mirror\cache
• python -m pre_commit run check-json --all-files --show-diff-on-failure
• python -m pre_commit run check-merge-conflict --all-files --show-diff-on-failure
• python -m pre_commit run check-toml --all-files --show-diff-on-failure
• python -m pre_commit run check-yaml --all-files --show-diff-on-failure
• python -m pre_commit run check-github-workflows --all-files --show-diff-on-failure
• python -m pre_commit run check-renovate --all-files --show-diff-on-failure
• python -m pre_commit run mypy --all-files --show-diff-on-failure
• local installed-command newcomer proof at workspace/tmp/consumer-blackbox-current-20260619