Initial import — snapshot from admin host /srv/gosec/gsc-ops-api

This repo had no version control prior to this commit. The import is a
straight snapshot of the working tree at 2026-05-03; the deployed
binary on fihelvop01 was being rebuilt from this source via `make
build` + scp into place, with no upstream review path.

The snapshot already includes one in-flight fix made on 2026-05-03 to
internal/service/persona.go:GetSelfModel — the handler queried
`source` and `strength` columns plus an `is_active = true` filter on
persona.persona_commitments, none of which exist on that table (its
shape is session-bound commitments with `status`, `commitment_meta`,
etc.). The query returned a 500 every time SynapseHub bootstrapped a
persona's self-model, dropping the IdentityConstraints / Commitments /
ConscienceStandards layer from the assembled prompt. The patched
query reads existing columns only (commitment_text, commitment_type),
filters on `status='active'`, and synthesises Source="learned" /
Strength=1.0 to keep the SelfModel response shape stable for callers.

Verified live: `GET /api/v1/personas/70f7cfd9-.../self-model` now
returns 200 with `{identityConstraints:[],commitments:[],
conscienceStandards:[]}` instead of 500.

Future changes go through PRs against this repo — no more bin-only
deploys.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

configs/asterisk/postfix-main.cf

@@ -0,0 +1,30 @@
+# Postfix satellite relay configuration for Asterisk voicemail-to-email
+# Deployed to /etc/postfix/main.cf on pb01 (172.17.6.40) and pb02 (172.17.6.41)
+
+# General
+myhostname = HOSTNAME_PLACEHOLDER.gosec.internal
+mydomain = gosec.internal
+myorigin = gosec.cloud
+mydestination =
+mynetworks = 127.0.0.0/8
+
+# Relay through mail server
+relayhost = [172.17.4.11]:25
+
+# Security
+inet_interfaces = loopback-only
+inet_protocols = ipv4
+
+# TLS (optional — internal relay)
+smtp_tls_security_level = none
+
+# Aliases
+alias_maps = hash:/etc/aliases
+alias_database = hash:/etc/aliases
+
+# Limits
+message_size_limit = 10485760
+mailbox_size_limit = 0
+
+# Logging
+syslog_name = postfix-voicemail