feat(phase-2): implement security boundary and hook middleware

- Created .intentignore to protect core system files. - Defined command classification policy in security_policy.json. - Established JSON error protocol for autonomous recovery.

.intentignore

@@ -0,0 +1,10 @@
+# GLOBAL SECURITY BOUNDARY
+.env
+.git/
+node_modules/
+.orchestration/trace_storage.db
+.clinerules
+
+# INTENT-SPECIFIC PROTECTION
+# Prevents the AI from modifying the core orchestration logic
+.orchestration/hooks/

.orchestration/security_policy.json

@@ -0,0 +1,11 @@
+{
+  "version": "1.0.0",
+  "command_classification": {
+    "safe": ["read_file", "list_files", "search_files"],
+    "destructive": ["write_to_file", "delete_file", "execute_command"]
+  },
+  "error_protocol": {
+    "type": "JSON_TOOL_ERROR",
+    "template": "Scope Violation: {intent_id} is not authorized to edit {file}. Request scope expansion."
+  }
+}