Repository layout (first-pass)

This repo is being refactored toward a clearer separation between runtime scripts, reusable shell libraries, operator validation scripts, and tests.

Top-level conventions

etc/
- Runtime/bootstrap/config scripts only.
- May contain thin compatibility shims that forward to new locations.
etc/lib/shell/
- Reusable shell helper libraries intended to be sourced by CLI/runtime scripts.
- Lives under etc/ so the runtime layout does not rely on gitignored $PROLE_HOME/lib.
- Prefer keeping logic here deterministic/testable; keep entrypoint scripts thin.
scripts/validation/
- Operator-run validation/check scripts.
- These may invoke cluster tooling (kubectl, etc.), but should source shared helpers from etc/lib/shell/.
tests/shellspec/
- Shellspec tests for deterministic helper behavior only (no cluster access).
- Focus areas: config parsing, env fallback resolution, realm normalization, secret precedence, guardrails, command assembly.
authority/
- Minimal Maven-backed Spring Boot service.
- Provides application startup and a basic health endpoint.