feat(notfiles): hexagonal architecture refactor with adapters, integration tests, and notsecrets cleanup

- Extract FileStore port and InMemoryFileStore/FileStoreImpl/Reporter adapters
- Add Reporter trait to notcore with TerminalReporter and JsonReporter
- Refactor linker, package, status modules to use FileStore port
- Add integration test suite with dotfiles fixtures
- Add cross-crate integration tests
- Remove ssh_rsa identity/recipient (unsupported)
- Add rustqual.toml, .sccignore, notfiles.toml config files
- Update CLAUDE.md, README.md, AGENTS.md with current architecture

.ctx/HANDOFF.md

@@ -1,4 +1,4 @@
-# Handoff — notfiles (2026-06-06)
+# Handoff — notfiles (2026-07-07)
 
 **Branch:** main | **Build:** unknown | **Tests:** unknown
 
@@ -6,9 +6,11 @@
 
 | ID | P | Status | Title |
 |---|---|---|---|
+| uncommitted-work | P1 | open | Uncommitted changes (3 files) |
 
 ## Log
 
+- 20260606.135918: done=13 running=0 pending=0 blocked=0
 - 2026-04-17: Added notnet crate with YubikeySource and threaded Tailscale into notstrap; design spec complete
 - 2026-04-15: Hardened bootstrap and hook-state failure handling, made notfiles FileStore usage real, and fixed copy-drift safety coverage
 - 2026-04-15: Pruned completed items from handoff; GitHub issues plus doob are now the source of truth for active work