M7.1: extract nisse-core

What isn't the dev agent's moves to nisse-core, unchanged in behaviour,
with its tests: canonical, render, render_anthropic, llm, catalog, probe,
context, views, state, reconcile, worker, cancel, dump, transport, matrix,
execution, testing, vault, memory, oplog, envfile and gitea (whole).

- nisse_core.state.StateStore holds the tables every agent has; an
  agent's subclass adds its tables (version, migrations), roles and
  views. nisse_dev.state.StateStore adds the build VM blocks (v5).
- views.project takes what each role is shown, rather than a fixed table.
- Vault takes the agent's name (agent=), for provenance.
- A test that nisse_core never imports an agent.
- The loop, config, git, delegation, expert, tools and evals stay in
  nisse-dev until nisse-ops has a loop to share.

Docs: the Development Plan marks M7.1 done and notes that Phase 6 waits on
the agent host and Terraform; Architecture Part L names the package.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk

nisse-dev/tests/test_agent_build.py

@@ -11,13 +11,13 @@ import httpx
 import pytest
 from test_config import SECRETS, P, tree
 
-from nisse_dev.catalog import ModelCatalog, UnknownModel
+from nisse_core.catalog import ModelCatalog, UnknownModel
+from nisse_core.execution import SSHHost
+from nisse_core.llm import AnthropicPassthroughClient, LiteLLMClient
+from nisse_core.oplog import OpLog
 from nisse_dev.config import AgentConfig
-from nisse_dev.execution import SSHHost
-from nisse_dev.llm import AnthropicPassthroughClient, LiteLLMClient
 from nisse_dev.loop.build import RunningLoop, build_loop_agent, discover_models
 from nisse_dev.loop.build import prepare_workspace as prepare
-from nisse_dev.oplog import OpLog
 
 # What the test roles resolve to, as LiteLLM would report them.
 TEST_CATALOG = ModelCatalog.from_payload(
@@ -143,7 +143,7 @@ def offline(monkeypatch: Any, origins: dict[str, str] | str, catalog=None) -> No
     """Only the network boundaries faked: Gitea, LiteLLM's model list, Matrix."""
     # The proxy here doesn't exist: a call to it fails at once rather than
     # waiting out an outage's backoff (L5).
-    monkeypatch.setattr("nisse_dev.llm.OUTAGE_BACKOFF_S", ())
+    monkeypatch.setattr("nisse_core.llm.OUTAGE_BACKOFF_S", ())
     monkeypatch.setattr(
         "nisse_dev.loop.build.GiteaClient.whoami", lambda self: "nisse-dev-testing"
     )