plan: orchestration.md v2 — Administrator agent, ls-remote discovery, statusline

Apply §7.1 of plan/orchestration-v2-redesign.md:

§3 (ref namespace): add init-check-* and admin-status-* to the
namespace diagram; describe Administrator-managed scratch and
informational refs.

§5 (naming conventions): add admin-status-<date>-<host> row;
note v2 ls-remote discovery replaces the v1 fetch --prune --tags
blunt hammer.

§6 (state machine): add explicit (SHA, ref-name) dedup contract;
document discovery contract (ls-remote default, targeted fetch on
pickup); update three role state-machine boxes to reflect ls-remote
discovery; add §6.4 Administrator state machine (phases 1+2 +
interrogation, with explicit denial of protocol-ref pushes).

§7 (config knobs): add TM, {admin-state-dir}, {admin-clone},
{discovery-method}, {integrator-test-cmd}; tighten cadence guidance
(60s production, 30s dry-run minimum, 10s tripped HTTPS rate
limit per dry-run F3).

§8 (push allowlist): add Administrator's narrow allowlist
(init-check-*, admin-status-*); add explicit denial on protocol-ref
pushes (analysis/, triage/, feature/, qa/, review/, base-branch).

§9.1, §9.2, §9.3 (worker prompts): add common Session-setup preamble
(statusline install per §9.7, recap-off, state file init,
ScheduleWakeup heartbeat); add common loop-iteration block
(state-file updates, ls-remote discovery, dedup, explicit-exit-check
on pushes per F5). Per-role specifics: Analyst gets ^{} peel
stripping (F2); Developer gets v1-vs-v{N>1} feature-source split
(no force-push), empty-commit convention for unchanged bodies, and
plans/skipped-triage.txt durable skip-list (Developer findings §3.3,
§3.4, §3.5); Integrator gets --force on tag fetch (F4) and the
test-runtime budget note (~9.5 min).

§9.4 (standalone Initialization): replaced by deprecation banner
pointing to §9.6 (Administrator phase 1) and Initialization-prompt.md
fallback.

§9.5 (model/effort): add Administrator row (Sonnet 4.6 / default;
Haiku 4.5 cost-efficient).

§9.6 (NEW Administrator): cross-reference to plan/Administrator-prompt.md
with model/effort rationale; canonical state machine in §6.4, knobs
in §7, allowlist in §8.

§9.7 (NEW statusline install/restore): common preamble snippet
documented once and referenced from §9.1-§9.3, §9.6; Stop hook
belt-and-suspenders cited from redesign §10.4.

§12 (failure modes): four new entries — Bash poll wrapper exits
silently (Stall A); re-tagged ref masked by name-only dedup
(Stall B); discovery rate-limited (F3); agent state file stale.

§13.1 (runbook): Administrator-first sequence; v1 standalone
fallback documented as a step-aside.

§13.3 (recovery): Administrator dashboard first; ls-remote
inspection instead of fetch --tags; annotated-tag inline-summary
probe per dry-run Integrator findings §5.3.

§16 (NEW polling-cost analysis): ranked alternatives (ls-remote
default, GitHub REST + ETag opt-in, SSH bucket, webhooks); concrete
recommendation; Phase B github-api sketch; rate-limit observability.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>