chore(sync): mirror front-door files to Space (hf-sync)

R5 Restraint -> Governance + GRC + Nav (additive): AR-006 restraint signal in Auto-Review; Restraint control contribution in /grc matrix+OSCAL; /restraint + /restraint-bench nav + flagship cross-link. 0 CDN; 0 codenames; additive-only; aligns-with not certified.

F2 fix: drop string workspace from /classify body (was 500ing the verdict sphere)

F2: Factory3D + AutoReview3D holographic enhancements (additive, 2D fallback)

I2: Governed Auto-Review keystone — direct HF sync (module + tab + serve.py registration + Dockerfile COPY)