docs: land prior ADR + prompt updates

Commit pre-existing uncommitted working-tree changes that predate the
license/public-readiness work — NOT authored in this session, just flushed so
they're not lost: ADR-0003/0005/0009/0012 edits, the new ADR-0013
(embeddings-bypass + two-slot residency, already referenced by CLAUDE.md), and
the phase-0..3 prompt revisions + prompts/README.md.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

prompts/phase-1.md

@@ -16,9 +16,13 @@ health endpoint — no Ollama logic yet.
   `internal/store`, `internal/server`. Don't create empty packages for later
   phases.
 - `internal/config`: load from env into a struct — `FOREMAN_ADDR` (listen addr,
-  default `:8080`), `FOREMAN_OLLAMA_URL` (target, required), `FOREMAN_TOKEN`
-  (optional inbound bearer), `FOREMAN_DB_PATH`, `FOREMAN_POLL_INTERVAL`. Provide
-  a `.env.example` documenting every key.
+  default `:8080`), `FOREMAN_OLLAMA_URL` (target, required), `FOREMAN_OLLAMA_TOKEN`
+  (optional outbound bearer to the target, for Ollama-Cloud-style auth),
+  `FOREMAN_TOKEN` (optional inbound bearer foreman requires of its callers),
+  `FOREMAN_EMBED_MODEL` (the always-resident embedder, e.g. `nomic-embed-text`),
+  `FOREMAN_DB_PATH`, `FOREMAN_POLL_INTERVAL`. Namespace **every** key under
+  `FOREMAN_` (do not use bare `OLLAMA_*`, which collide with real Ollama client
+  vars). Provide a `.env.example` documenting every key.
 - `internal/store`: SQLite via `modernc.org/sqlite`, WAL mode, with an embedded
   migration for the `jobs` and `artifacts` tables (schema sketch in ADR-0008 /
   ADR-0006). Include open/close, migrate-on-start, and basic CRUD with tests