Initial import — snapshot from admin host /srv/gosec/gsc-ops-api

This repo had no version control prior to this commit. The import is a
straight snapshot of the working tree at 2026-05-03; the deployed
binary on fihelvop01 was being rebuilt from this source via `make
build` + scp into place, with no upstream review path.

The snapshot already includes one in-flight fix made on 2026-05-03 to
internal/service/persona.go:GetSelfModel — the handler queried
`source` and `strength` columns plus an `is_active = true` filter on
persona.persona_commitments, none of which exist on that table (its
shape is session-bound commitments with `status`, `commitment_meta`,
etc.). The query returned a 500 every time SynapseHub bootstrapped a
persona's self-model, dropping the IdentityConstraints / Commitments /
ConscienceStandards layer from the assembled prompt. The patched
query reads existing columns only (commitment_text, commitment_type),
filters on `status='active'`, and synthesises Source="learned" /
Strength=1.0 to keep the SelfModel response shape stable for callers.

Verified live: `GET /api/v1/personas/70f7cfd9-.../self-model` now
returns 200 with `{identityConstraints:[],commitments:[],
conscienceStandards:[]}` instead of 500.

Future changes go through PRs against this repo — no more bin-only
deploys.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

configs/asterisk/voicemail.conf

@@ -0,0 +1,45 @@
+; Asterisk Voicemail Configuration
+; Mailbox data loaded from PostgreSQL via ODBC Realtime (extconfig.conf)
+; Email delivery via local Postfix satellite relay
+
+[general]
+format=wav49|wav
+serveremail=voicemail@gosec.cloud
+attach=yes
+skipms=3000
+maxsilence=10
+silencethreshold=128
+maxlogins=3
+maxmsg=100
+maxsecs=180
+minsecs=3
+saycid=yes
+sayduration=yes
+saydurationm=2
+sendvoicemail=yes
+review=yes
+operator=no
+envelope=yes
+delete=no
+nextaftercmd=yes
+forcename=no
+forcegreetings=no
+
+; Email settings
+emailsubject=New voicemail from ${VM_CALLERID} (${VM_DUR})
+emailbody=Dear ${VM_NAME},\n\nYou have a new voicemail:\n\n  From: ${VM_CALLERID}\n  Date: ${VM_DATE}\n  Duration: ${VM_DUR}\n  Message: ${VM_MSGNUM}\n\nDial *97 to listen.\n\n--\nGoSec Cloud PBX
+emaildateformat=%A, %B %d, %Y at %r
+pagerdateformat=%A, %B %d, %Y at %r
+mailcmd=/usr/sbin/sendmail -t
+
+; Timezone
+tz=utc
+
+[zonemessages]
+utc=UTC|'vm-received' q 'digits/at' H N
+european=Europe/Helsinki|'vm-received' a d b 'digits/at' HM
+eastern=America/New_York|'vm-received' Q 'digits/at' IMp
+
+; Default context — mailbox data from realtime DB
+; No static mailboxes needed; all loaded from pbx_voicemail_boxes via ODBC
+[default]