feat(my-deepagent): v0.1.0 Step 0~5 — scaffolding through deepagent + OpenRouter

Python rewrite of the agent harness on top of deepagents 0.6.1 + langchain 1.x,
replacing the abandoned TS attempt in packages/. 388 unit/integration tests pass.

Steps
-----
0. Scaffolding — uv workspace, ruff/mypy/pre-commit/alembic, src/tests/docs
   trees with docs/schemas/ seeded from my-deepagent-seed/.
1. Core — config (pydantic-settings with MYDEEPAGENT_ env prefix and TOML
   source), enums (Backend, Capability, RiskLevel, ApprovalDecisionAction,
   ApprovalState, RunState, RunPhaseState, SessionState, ErrorClass),
   errors (MyDeepAgentError + BudgetExhaustedError with PEP-3134 cause +
   context suppression), hash (canonical JSON + sha256).
2. Persona/Workflow/Binding — pydantic v2 schemas with tuple-based deep
   immutability (post-construction hash drift prevented), YAML loaders,
   deterministic auto-select (preferred_backends → version → name → hash),
   override resolution with ineligibility diagnostics, PersonaConsentStore
   with fcntl.flock + tmp+fsync+rename atomic write.
3. Artifact schema registry — Draft202012Validator, multi-root resolution,
   structured ValidationFinding output.
4. Persistence — 18 SQLAlchemy 2.0 async ORM models with FK CASCADE/RESTRICT,
   WAL + busy_timeout + foreign_keys PRAGMA, alembic baseline +
   ux_active_run_repo_base partial unique index, LangGraph SqliteSaver as
   context manager only (lifecycle safety).
5. DeepAgent session — build_agent wires Persona → create_deep_agent with
   LocalShellBackend / FilesystemBackend / StateBackend / CompositeBackend,
   ChatOpenAI(base_url=openrouter) for openrouter: model strings, and 4
   middleware classes (cost / audit-tool / safety-shell / fallback-model).

Critical workarounds
--------------------
- deepagents 0.6.1 rejects FilesystemPermission together with backends that
  implement SandboxBackendProtocol (LocalShellBackend). SafetyShellMiddleware
  enforces destructive-command and secret-path policy at the tool layer
  instead, and build_agent strips the permissions kwarg when the persona's
  deepagents_backend is local_shell.
- FilesystemOperation in deepagents is Literal['read', 'write'] only;
  _map_operations collapses our richer schema (read/write/edit/ls) safely.

Real OpenRouter smoke
---------------------
test_openrouter_deepagents_local_shell_smoke calls DeepSeek via deepagents +
LocalShellBackend + SafetyShellMiddleware end-to-end. PASS, ~$0.000001 cost,
input=9 / output=1 tokens with content "OK".

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

my-deepagent/docs/schemas/artifacts/dev/review-finding-batch@1.json

@@ -0,0 +1,76 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "dev/review-finding-batch@1",
+  "title": "Dev Review Finding Batch",
+  "description": "코드 리뷰 또는 검증 결과 finding 묶음",
+  "type": "object",
+  "required": ["runId", "phaseKey", "reviewerRole", "findings", "summary"],
+  "additionalProperties": false,
+  "properties": {
+    "runId": {
+      "type": "string",
+      "format": "uuid",
+      "description": "실행 고유 식별자 (UUID)"
+    },
+    "phaseKey": {
+      "type": "string",
+      "minLength": 1,
+      "description": "현재 phase 키 (예: review, verify)"
+    },
+    "reviewerRole": {
+      "type": "string",
+      "minLength": 1,
+      "description": "리뷰어 역할 (예: code-reviewer, verifier, security-auditor)"
+    },
+    "findings": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["severity", "category", "summary"],
+        "additionalProperties": false,
+        "properties": {
+          "severity": {
+            "type": "string",
+            "enum": ["info", "low", "medium", "high", "critical"],
+            "description": "심각도"
+          },
+          "category": {
+            "type": "string",
+            "enum": ["correctness", "evidence", "style", "security", "performance", "other"],
+            "description": "finding 카테고리"
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "문제 요약 (보안 finding은 OWASP 카테고리 prefix 권장)"
+          },
+          "filePath": {
+            "type": "string",
+            "description": "해당 파일 경로 (선택)"
+          },
+          "line": {
+            "type": "integer",
+            "minimum": 1,
+            "description": "해당 라인 번호 (선택)"
+          },
+          "evidence": {
+            "type": "string",
+            "description": "증거 코드 또는 설명 (선택)"
+          },
+          "verifierStatus": {
+            "type": "string",
+            "enum": ["unverified", "confirmed", "rejected"],
+            "default": "unverified",
+            "description": "verifier의 검증 상태"
+          }
+        }
+      },
+      "description": "발견된 finding 목록"
+    },
+    "summary": {
+      "type": "string",
+      "minLength": 10,
+      "description": "전체 리뷰 요약"
+    }
+  }
+}