Build Gateway control-plane MVP

[madtank]

Summary

• build the local Gateway control-plane MVP across CLI, daemon, local UI, and runtime supervision
• add the Gateway spec stack for connectivity, taxonomy, governance, and identity/space contracts
• add Gateway-managed runtime templates, agent setup skill, approval flows, and Ollama model testing

What changed

• add ax gateway daemon, UI, status, start/stop, approvals, doctor, and managed-agent commands
• add shared Gateway state derivation for mode, presence, reply, confidence, reachability, identity, and space status
• add template/runtime catalog support for Echo, Hermes, Ollama, inbox workers, and setup metadata
• add governance primitives for local bindings, attestation, approvals, and identity-space enforcement
• add the gateway-agent-setup skill and Gateway spec documents under specs/
• add the Gateway Ollama bridge plus model discovery/default-selection flow in the UI and CLI

Verification

• pytest -q tests/test_gateway_commands.py
• ruff check ax_cli/gateway.py ax_cli/commands/gateway.py ax_cli/gateway_runtime_types.py tests/test_gateway_commands.py

Live proof

• local Gateway UI runs via uv run ax gateway start
• Gateway-managed Ollama agent solstice auto-selected gemma4:latest
• agent-authored test reply succeeded with: gemma4 default OK

Review focus

• operator model: Mode + Presence + Reply + Confidence
• governance and identity/space enforcement behavior
• add/update/setup UX and agent-operated control-plane framing
• Ollama template/model testing flow