[plan] Jarvis Deep Links and Read-Only Tools

_Automatically composed from the parent epic at dispatch time._

7 coders (#5134–5140) in 3 phases, split along the architecture's boundaries. C5 is split into a reader/audit-mark child and an entity-tools child. C7's dev walk (AC6.6) moves to Finish; its checklist is in the report. Critic passed after one revision.