feat: add RC2 governance support and full spec coverage

Add governance protocol (sync_plans, check_governance, report_plan_outcome,
get_plan_audit_logs, get_creative_features) with GovernanceHandler, wire
RC2 tasks through client/server/adapters/CLI/MCP, add spec coverage tests,
and integrate PR #160's oneOf flattening. Remove stale SubAsset types
(schema removed in RC2), fix list field shadowing in
GetPropertyListResponse, add path-traversal validation to registry.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: bokelley

schemas/cache/.hashes.json

@@ -0,0 +1,70 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "/schemas/3.0.0-rc.2/a2ui/bound-value.json",
+  "title": "A2UI Bound Value",
+  "description": "A value that can be a literal or bound to a path in the data model",
+  "oneOf": [
+    {
+      "type": "object",
+      "description": "Literal string value",
+      "properties": {
+        "literalString": {
+          "type": "string",
+          "description": "Static string value"
+        }
+      },
+      "required": ["literalString"],
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "description": "Literal number value",
+      "properties": {
+        "literalNumber": {
+          "type": "number",
+          "description": "Static number value"
+        }
+      },
+      "required": ["literalNumber"],
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "description": "Literal boolean value",
+      "properties": {
+        "literalBoolean": {
+          "type": "boolean",
+          "description": "Static boolean value"
+        }
+      },
+      "required": ["literalBoolean"],
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "description": "Path to data model value",
+      "properties": {
+        "path": {
+          "type": "string",
+          "description": "JSON pointer path to value in data model (e.g., '/products/0/title')"
+        }
+      },
+      "required": ["path"],
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "description": "Literal with path binding (sets default and binds)",
+      "properties": {
+        "literalString": {
+          "type": "string"
+        },
+        "path": {
+          "type": "string"
+        }
+      },
+      "required": ["literalString", "path"],
+      "additionalProperties": false
+    }
+  ]
+}

schemas/cache/a2ui/bound-value.json

@@ -1,31 +1,29 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "additionalProperties": true,
+  "$id": "/schemas/3.0.0-rc.2/a2ui/component.json",
+  "title": "A2UI Component",
   "description": "A component in an A2UI surface",
+  "type": "object",
   "properties": {
-    "component": {
-      "additionalProperties": {
-        "description": "Component properties",
-        "type": "object"
-      },
-      "description": "Component definition (keyed by component type)",
-      "maxProperties": 1,
-      "minProperties": 1,
-      "type": "object"
-    },
     "id": {
-      "description": "Unique identifier for this component within the surface",
-      "type": "string"
+      "type": "string",
+      "description": "Unique identifier for this component within the surface"
     },
     "parentId": {
-      "description": "ID of the parent component (null for root)",
-      "type": "string"
+      "type": "string",
+      "description": "ID of the parent component (null for root)"
+    },
+    "component": {
+      "type": "object",
+      "description": "Component definition (keyed by component type)",
+      "minProperties": 1,
+      "maxProperties": 1,
+      "additionalProperties": {
+        "type": "object",
+        "description": "Component properties"
+      }
     }
   },
-  "required": [
-    "id",
-    "component"
-  ],
-  "title": "A2UI Component",
-  "type": "object"
-}
+  "required": ["id", "component"],
+  "additionalProperties": true
+}