ci(org): positioning guardrail + live Key Repos table

[haasonsaas]

Closes the two follow-ups from the README refocus (#142).

1. Positioning guardrail for the org front door

The hopper copy-guardrail (evalops/hopper #197) only watches the marketing site, which is why the org README drifted to the eval-era tagline while the site moved on. This adds a self-contained equivalent for .github:

• scripts/check-positioning.mjs — no ripgrep/npm deps, plain node. Greps profile/README.md, README.md, AGENTS.md, SECURITY.md for eval-era + execution-first phrases (organizational operating system, shipping accountable AI, put agents to work, operating layer, etc.) and fails the build on a match.
• .github/workflows/positioning-guardrail.yml — runs it on push/PR touching those docs or the check itself.

Verified: all four docs pass clean today.

2. Key Repos table → live repos

The table pointed at three deprecated/archived repos (proto, service-runtime, console — all absorbed into platform). Swapped for platform, maestro, deploy, hopper, and fixed the product-frontends line (console → conductor).

🤖 Generated with Claude Code

[cursor]

PR Summary

Low Risk
Documentation and CI-only checks with no runtime, auth, or data-path changes.

Overview
Adds CI that blocks off-frame marketing copy in org-facing docs and refreshes the org profile Key Repos links to match current repositories.

A new scripts/check-positioning.mjs scans profile/README.md, README.md, AGENTS.md, and SECURITY.md for banned eval-era and execution-first phrases (aligned with the hopper positioning guardrail) and fails with file/line errors on match. .github/workflows/positioning-guardrail.yml runs that script on push/PR when those paths or the workflow change.

profile/README.md updates the product-frontends topic blurb from console to maestro, conductor, admin, and replaces deprecated proto, service-runtime, and console rows with platform, maestro, deploy, and hopper.

^{Reviewed by Cursor Bugbot for commit c027a68. Bugbot is set up for automated code reviews on this repo. Configure here.}