feat: zeroclaw agentic agency architecture — agents, skills, Rust crates

- 18 agent specs across Software, Support, Marketing, Cross-cutting
  (orchestrator + 7 software + 5 support + 3 cross-cutting + leads-finder)
- 8 reusable skills (handoff, pr-review, dokploy-deploy, campaign-structure,
  content-calendar, ticket-triage, license-lifecycle, invoice-draft)
- 3 JSON schemas: handoff, deliverable, approval
- Policies: autonomy levels, tool risk classification, compliance (DSGVO/GoBD/UWG)
- routing.toml: model tiers T1/T2/T3 + provider config (PII gating)
- Rust workspace (5 crates, all compile + 16 tests pass):
  - aos-mcp: tool registry + risk tagging
  - aos-policy: autonomy levels, budget enforcement, approval requests
  - aos-license: ed25519 license issue/verify (real crypto + CLI binary)
  - aos-ledger: integer-cents money math, gapless numbering, VAT, audit chain
  - aos-sync: frontmatter validator (18/18 specs pass), CLI binary
- CLAUDE.md entry point with architecture overview + roadmap

agency-agents/schemas/approval.json

@@ -0,0 +1,44 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://zeroclaw.dev/schemas/approval.json",
+  "title": "ApprovalRequest",
+  "description": "A request that pauses a task at a human gate. Every high-risk action (spend, publish, send, revoke, delete, deploy, file-with-authorities) produces one of these. Lives in the AOS approval inbox + notifications.",
+  "type": "object",
+  "required": ["approval_id", "task_id", "agent", "action", "risk", "rationale", "diff_summary"],
+  "additionalProperties": false,
+  "properties": {
+    "approval_id": { "type": "string", "description": "AOS-generated cuid for this approval." },
+    "task_id": { "type": "string", "pattern": "^AOS-\\d+$" },
+    "agent": { "type": "string", "description": "Agent requesting approval." },
+    "action": {
+      "enum": [
+        "spend",
+        "publish_public",
+        "send_invoice",
+        "send_client_communication",
+        "send_outreach",
+        "revoke_license",
+        "delete_data",
+        "delete_instance",
+        "delete_dns",
+        "production_deploy",
+        "db_migration_live",
+        "file_with_authorities",
+        "contract_change",
+        "budget_change",
+        "campaign_activation"
+      ],
+      "description": "The category of irreversible/external action. Each maps to a hard rule in the policy crate."
+    },
+    "risk": { "enum": ["medium", "high", "critical"] },
+    "rationale": { "type": "string", "description": "Why the agent believes this action is needed, in 1-3 sentences." },
+    "diff_summary": { "type": "string", "description": "Human-readable summary of what will change if approved (e.g. 'Spend 50 EUR on Google Ads campaign X', 'Delete instance abc.dfmpanel.eu', 'Send invoice RE-2026-0042 to client@bauer.de')." },
+    "payload": {
+      "type": "object",
+      "description": "Structured details for the approver to inspect. Shape varies by action; validated by the policy crate.",
+      "additionalProperties": true
+    },
+    "expires_at": { "type": "string", "format": "date-time", "description": "Optional: if not approved by this time, the task auto-fails." },
+    "estimated_cost_eur": { "type": "number", "minimum": 0 }
+  }
+}