M7.1: extract nisse-core

What isn't the dev agent's moves to nisse-core, unchanged in behaviour,
with its tests: canonical, render, render_anthropic, llm, catalog, probe,
context, views, state, reconcile, worker, cancel, dump, transport, matrix,
execution, testing, vault, memory, oplog, envfile and gitea (whole).

- nisse_core.state.StateStore holds the tables every agent has; an
  agent's subclass adds its tables (version, migrations), roles and
  views. nisse_dev.state.StateStore adds the build VM blocks (v5).
- views.project takes what each role is shown, rather than a fixed table.
- Vault takes the agent's name (agent=), for provenance.
- A test that nisse_core never imports an agent.
- The loop, config, git, delegation, expert, tools and evals stay in
  nisse-dev until nisse-ops has a loop to share.

Docs: the Development Plan marks M7.1 done and notes that Phase 6 waits on
the agent host and Terraform; Architecture Part L names the package.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk

scripts/probe_context.py

@@ -5,7 +5,7 @@
 ALIAS is a LiteLLM model alias. The LiteLLM URL and token come from the agent
 config (NISSE_CONFIG, ./nisse-dev.yaml, or --config), with its secrets from
 the environment or .env. See docs/Tuning-Guide.md, "Declaring a local model's
-limits", and nisse_dev/probe.py for what the verdicts mean.
+limits", and nisse_core/probe.py for what the verdicts mean.
 """
 
 import argparse
@@ -15,10 +15,10 @@ from pathlib import Path
 
 import httpx
 
-from nisse_dev.catalog import ModelCatalog
+from nisse_core.catalog import ModelCatalog
+from nisse_core.envfile import load_env_file
+from nisse_core.probe import probe
 from nisse_dev.config import AgentConfig, ConfigError
-from nisse_dev.envfile import load_env_file
-from nisse_dev.probe import probe
 
 
 def main() -> int: