Add Project & Workspace MCP System with role-based permissions

- Add roboco_project_* tools (list, get, create, update) with CEO bypass
  - Add roboco_workspace_* tools (ensure, status, list) for workspace management
  - Add project_slug and requires_git fields to TaskCreateInput schema
  - Validate project exists and cell matches when creating git-enabled tasks
  - Register project MCP server in orchestrator with proper permissions

  Workspace permissions by role:
  - Developer: Write to own workspace only
  - QA: Read-only access to all cell workspaces
  - Documenter: Write to all cell workspaces (add docs to dev branches)
  - Cell PM: Write to own workspace, project_update for own cell
  - Main PM: Full project access (create, update all, workspace_list all)
  - CEO: Full bypass on all permission checks

  Also includes:
  - Git templates for commits, branches, PRs (separation of concerns)
  - Updated blueprints with project/workspace tools documentation
  - Updated RAG docs with project tools reference

docs/rag/workflows/git-commits.md

@@ -19,7 +19,8 @@ Example:
 roboco_git_commit(
     project_slug="roboco",
     task_id="a1b2c3d4-e5f6-7890-abcd-ef1234567890",
-    message="Add rate limiting endpoint"
+    message="Add rate limiting endpoint",
+    commit_type="feat"  # Required
 )
 ```
 
@@ -62,7 +63,7 @@ Co-authored-by: {agent-name}
 ## Push Commits
 
 ```python
-roboco_git_push(project_slug="roboco")
+roboco_git_push(project_slug="roboco", task_id="a1b2c3d4...")
 ```
 
 Push before: