Archive completed tasks, add cleanup commands, self-documenting dashboard UI

- Archive 79 completed framework-dev tasks from tasks/ -> tasks/complete/
- status.py: add --cleanup-done and --install-cleanup-schedule commands
- Add scripts/automaton-cleanup.sh for periodic task archiving
- Dashboard: rename 'Background' tab -> 'Agent', 'Cleanup' agent -> 'Completed Task Archiver', remove redundant group headers and pill badges, dim inactive agent placeholders
- .rules.md: add Self-Documenting UI Names rule
- New tests: test_cleanup_done.py, expanded test_app.py and test_task.py

tasks/port-pi-guard/ADVERSARIAL_BUG_REPORT.md

@@ -1,14 +0,0 @@
-# Adversarial Bug Report — port-pi-guard
-
-## Attack Vectors
-1. **Status.py not available**: The plugin falls open (allows all edits) — can this be triggered maliciously?
-2. **Command injection in execSync**: Is the `cmd` string safe from injection?
-3. **Bash tool regex bypass**: Can write operations evade the bash tool pattern check?
-
-## Findings
-- Fall-open when status.py is missing is acceptable for offline/local use — an attacker who can remove status.py already has system access
-- `execSync` uses hardcoded command parts + `process.cwd()` — no user input in the command string, safe
-- Bash regex could be evaded with alternative write commands (e.g., `install`, `cat >`), but this is a best-effort check and the guard primarily targets edit/write tools
-
-## Verdict
-No exploitable vulnerabilities found.