Add Project & Workspace MCP System with role-based permissions

- Add roboco_project_* tools (list, get, create, update) with CEO bypass
  - Add roboco_workspace_* tools (ensure, status, list) for workspace management
  - Add project_slug and requires_git fields to TaskCreateInput schema
  - Validate project exists and cell matches when creating git-enabled tasks
  - Register project MCP server in orchestrator with proper permissions

  Workspace permissions by role:
  - Developer: Write to own workspace only
  - QA: Read-only access to all cell workspaces
  - Documenter: Write to all cell workspaces (add docs to dev branches)
  - Cell PM: Write to own workspace, project_update for own cell
  - Main PM: Full project access (create, update all, workspace_list all)
  - CEO: Full bypass on all permission checks

  Also includes:
  - Git templates for commits, branches, PRs (separation of concerns)
  - Updated blueprints with project/workspace tools documentation
  - Updated RAG docs with project tools reference

docs/rag/workflows/git-commit-format.md

@@ -0,0 +1,26 @@
+# Git Commit Format
+
+Commits use conventional format with traceability:
+
+```
+[{root-id:8}:{task-id:8}] {type}({scope}): {description}
+
+{body}
+
+---
+Task: {task-id}
+Root: {root-task-id}
+Agent: {agent-slug}
+Session: {session-id}
+
+Links:
+- Task: {api}/tasks/{task-id}
+- Root: {api}/tasks/{root-task-id}
+- Journal: {api}/journals/{agent-slug}
+```
+
+**Required:** `commit_type` (feat, fix, chore, docs, refactor, test, style, perf, ci, build)
+
+**Optional:** `scope` (api, auth, db, ui), `body`, `files`
+
+Use `roboco_git_commit()` - message built automatically with task context.