fix(gates): gate on the DEED grammar, per the template and standards#837 (#43)

## Why

The guard in `dogfood-gate.yml` counted `.a2ml` files only:

```
COUNT=$(find . -name '*.a2ml' -not -path './.git/*' | wc -l)
```

so a repo whose manifest is written in the current grammar is reported
as having none, and the
summary/compliance row is skipped by the same predicate (`if find .
-name '*.a2ml' ... | grep -q .`).
The validator itself has scanned both grammars for a while -- the
caller's predicate is the bug.

## Authority

- `rsr-template-repo/.github/workflows/deed-validate.yml` (the mint
source) is what this wording is
copied from, byte for byte, including `-type f`-free `find` and the
dual-accept stance.
- `standards#837` — "DEED conversion campaign", campaign step 4: *"flip
... RSR gates from `.a2ml`
presence to `.deed` presence alongside". Gate predicates, not document
contents.
- `deed-ecosystem/README.adoc`: *"The DEED format name and `.deed`
extension are final, not A2ML."*

## Deliberately not done

- No `.a2ml` file is translated or renamed. #837 makes classification
into the four DEED forms and
per-family mapping specs a prerequisite for mass translation; that is
not this PR.
- No gate that *reads* a retained file is touched (`CLAIMS.a2ml`,
`.machine_readable/Debtfile.a2ml`,
`contractiles/INDEX.a2ml`); rewriting those would fail gates that
currently pass.
- No job-id or shell-var renames (`a2ml-validate`, `A2ML_COUNT`): they
are referenced from `needs:`
and `${{ needs.*.outputs }}`. The Checks-UI label is updated, as it has
no references.

_Estate-wide `.deed` gate convergence, 2026-09-21. Script:
`estate-audit/engine/deed_gate_migration.py`._

---------

Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

Author: hyperpolymath

.github/hooks/validate-a2ml.sh

@@ -288,8 +288,8 @@ echo "::group::A2ML Manifest Validation"
 echo "Scanning ${SCAN_PATH} for .a2ml files..."
 echo ""
 
-# Find all .a2ml files, excluding .git directory
-mapfile -t a2ml_candidates < <(find "$SCAN_PATH" -name '*.a2ml' -not -path '*/.git/*' -type f | sort)
+# Find all manifest files, excluding .git directory
+mapfile -t a2ml_candidates < <(find "$SCAN_PATH" \( -name '*.a2ml' -o -name '*.deed' \) -not -path '*/.git/*' -type f | sort)
 
 # Apply paths-ignore filter
 a2ml_files=()

.github/workflows/dogfood-gate.yml

@@ -20,7 +20,7 @@ jobs:
   # Job 1: A2ML manifest validation
   # ---------------------------------------------------------------------------
   a2ml-validate:
-    name: Validate A2ML manifests
+    name: Validate DEED manifests
     runs-on: ubuntu-latest
 
     steps:
@@ -30,10 +30,10 @@ jobs:
       - name: Check for A2ML files
         id: detect
         run: |
-          COUNT=$(find . -name '*.a2ml' -not -path './.git/*' | wc -l)
+          COUNT=$(find . \( -name '*.a2ml' -o -name '*.deed' \) -not -path './.git/*' | wc -l)
           echo "count=$COUNT" >> "$GITHUB_OUTPUT"
           if [ "$COUNT" -eq 0 ]; then
-            echo "::warning::No .a2ml manifest files found. Every RSR repo should have 0-AI-MANIFEST.a2ml"
+            echo "::warning::No .a2ml/.deed manifest files found. Every RSR repo should have a repo deed (<reponame>_chora.deed); legacy 0-AI-MANIFEST.a2ml accepted mid-migration — standards #837"
           fi
 
       - name: Validate A2ML manifests
@@ -46,14 +46,14 @@ jobs:
             cat <<'EOF' >> "$GITHUB_STEP_SUMMARY"
           ## A2ML Validation
 
-          :warning: **No .a2ml files found.** Every RSR-compliant repo should have at least `0-AI-MANIFEST.a2ml`.
+          :warning: **No .a2ml/.deed manifest files found.** Every RSR-compliant repo should have a repo deed (`<reponame>_chora.deed`) at its root.
 
-          Create one with: `a2mliser init` or copy from [rsr-template-repo](https://github.com/hyperpolymath/rsr-template-repo).
+          Copy it from [rsr-template-repo](https://github.com/hyperpolymath/rsr-template-repo).
           EOF
           else
             echo "## A2ML Validation" >> "$GITHUB_STEP_SUMMARY"
             echo "" >> "$GITHUB_STEP_SUMMARY"
-            echo "Scanned **${A2ML_COUNT}** .a2ml file(s). See step output for details." >> "$GITHUB_STEP_SUMMARY"
+            echo "Scanned **${A2ML_COUNT}** manifest file(s) (.deed, or legacy .a2ml). See step output for details." >> "$GITHUB_STEP_SUMMARY"
           fi
 
   # ---------------------------------------------------------------------------
@@ -91,7 +91,7 @@ jobs:
             cat <<'EOF' >> "$GITHUB_STEP_SUMMARY"
           ## K9 Contract Validation
 
-          :warning: **No K9 contract files found.** Repos with configuration files should have K9 contracts.
+          :warning: **No .k9/.k9.ncl contract files found.**
 
           Generate contracts with: `k9iser generate .`
           EOF
@@ -242,7 +242,7 @@ jobs:
           MAX=5
 
           # A2ML manifest present?
-          if find . -name '*.a2ml' -not -path './.git/*' | head -1 | grep -q .; then
+          if find . \( -name '*.a2ml' -o -name '*.deed' \) -not -path './.git/*' | head -1 | grep -q .; then
             SCORE=$((SCORE + 1))
             A2ML_STATUS=":white_check_mark:"
           else
@@ -288,7 +288,7 @@ jobs:
 
           | Tool/Format | Status | Notes |
           |-------------|--------|-------|
-          | A2ML manifest (0-AI-MANIFEST.a2ml) | ${A2ML_STATUS} | Required for all RSR repos |
+          | DEED repo deed (`<reponame>_chora.deed`) | ${A2ML_STATUS} | Required for all RSR repos |
           | K9 contracts | ${K9_STATUS} | Required for repos with config files |
           | .editorconfig | ${EC_STATUS} | Required for all repos |
           | Groove endpoint | ${GROOVE_STATUS} | Required for service repos |