Archive completed tasks, add cleanup commands, self-documenting dashboard UI

- Archive 79 completed framework-dev tasks from tasks/ -> tasks/complete/
- status.py: add --cleanup-done and --install-cleanup-schedule commands
- Add scripts/automaton-cleanup.sh for periodic task archiving
- Dashboard: rename 'Background' tab -> 'Agent', 'Cleanup' agent -> 'Completed Task Archiver', remove redundant group headers and pill badges, dim inactive agent placeholders
- .rules.md: add Self-Documenting UI Names rule
- New tests: test_cleanup_done.py, expanded test_app.py and test_task.py

tasks/harden-dashboard-security/VERDICT.md

@@ -1,21 +0,0 @@
-# Verdict: harden-dashboard-security
-
-## Status: PASS
-**Completion Date**: 2026-06-14
-
-## Summary
-Closed dashboard security gaps: CORS headers on all API responses, POST content-length bounds (64KB), review comment length limits (4096 chars), XSS defense via escapeHtml on display names and data attributes instead of inline onclick, filesystem task name validation inherited from fix-verdict-parsing.
-
-## Findings
-- All 119 tests pass (including 7 new security/CORS tests)
-- CORS headers present on all JSON responses and OPTIONS preflight
-- X-Content-Type-Options: nosniff on all responses
-- Review POST rejects Content-Length > 65536 with 413
-- Review comment truncated to 4096 characters
-- Task names with special characters are excluded from discover_tasks output (implemented in fix-verdict-parsing)
-
-## Tasks for Review / Tie-Breaks
-- None
-
-## Score
-+10