M7.1: extract nisse-core

What isn't the dev agent's moves to nisse-core, unchanged in behaviour,
with its tests: canonical, render, render_anthropic, llm, catalog, probe,
context, views, state, reconcile, worker, cancel, dump, transport, matrix,
execution, testing, vault, memory, oplog, envfile and gitea (whole).

- nisse_core.state.StateStore holds the tables every agent has; an
  agent's subclass adds its tables (version, migrations), roles and
  views. nisse_dev.state.StateStore adds the build VM blocks (v5).
- views.project takes what each role is shown, rather than a fixed table.
- Vault takes the agent's name (agent=), for provenance.
- A test that nisse_core never imports an agent.
- The loop, config, git, delegation, expert, tools and evals stay in
  nisse-dev until nisse-ops has a loop to share.

Docs: the Development Plan marks M7.1 done and notes that Phase 6 waits on
the agent host and Terraform; Architecture Part L names the package.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk

tests/integration/test_end_to_end_loop.py

@@ -31,10 +31,11 @@ from e2e_support import (
     task,
 )
 
-from nisse_dev.canonical import ActionVerdict
+from nisse_core.canonical import ActionVerdict
+from nisse_core.execution import SSHHost
+from nisse_core.gitea import GiteaClient, GiteaError
+from nisse_core.transport import InMemoryTransport
 from nisse_dev.config import AgentConfig, LoopTuning
-from nisse_dev.execution import SSHHost
-from nisse_dev.gitea import GiteaClient, GiteaError
 from nisse_dev.loop import preflight
 from nisse_dev.loop.build import RunningLoop, build_loop_agent
 from nisse_dev.loop.items import (
@@ -46,7 +47,6 @@ from nisse_dev.loop.items import (
     item_for_issue,
     loop_of,
 )
-from nisse_dev.transport import InMemoryTransport
 
 pytestmark = [pytest.mark.integration, pytest.mark.e2e]
 
@@ -71,7 +71,7 @@ def running(
     run = uuid.uuid4().hex[:8]
     stack = contextlib.ExitStack()
     # Kept outside pytest's temp directories, which pytest prunes, so a
-    # failed run's transcript can be read afterwards (nisse_dev.dump).
+    # failed run's transcript can be read afterwards (nisse_core.dump).
     keep = Path(os.environ.get("NISSE_E2E_RUNS", "/tmp/nisse-e2e-runs")) / run
     keep.mkdir(parents=True, exist_ok=True)
     print(f"\ne2e run {run}: state store in {keep}")