Initial public push: docs cosmos v4 + AI module + framework groundwork

This is the snapshot the production landing site (nibiru-framework.com) is
deployed from. Brings together the recent splash + docs migration to the v4
"Cosmos" design system, the new in-framework AI module, and the framework
groundwork that backs the framework-reference extraction.

What lands:
- docs/: Astro + Starlight site with the v4 dark cosmic palette, GalaxyHero
  canvas constellation, Mission Control chat (wired to /api/oracle →
  api.neuronetz.ai via providers.mjs Ollama), 5-panel MMVC stage
  (Model · AI · Module · Controller · View), translated EN/DE/JA/ES/FR
  content, PWA + sitemap + llms.txt + Umami analytics.
- docs/design-system/: canonical mockup bundle (source/index-v2.html for
  splash, source/docs-system.html + preview/ for docs, SPEC.md, tokens).
- docs/scripts/extraction/framework-reference-v2.md: deep framework
  reference (~1.6k lines, file:line citations, every public factory and
  idiom — basis for the LoRA training corpus.
- application/module/ai/: AI module with chat / embed / RAG / agent
  plugins, plus pdoQuery / httpGet / fileRead tools and Modelfile +
  smoke-test in training/.
- application/module/users/: user / ACL / form-factory traits used as the
  reference plugin pattern for the framework docs.
- application/settings/config/database/: schema + seed migrations
  including the AI module tables (200–203).
- Form factory + autogenerator changes the framework-reference-v2 covers.

Production secrets stay out: docs/.env, settings.production.ini and
ai.production.ini are all gitignored (.example files are in tree).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

application/module/ai/plugins/tools/httpGet.php

@@ -0,0 +1,68 @@
+<?php
+namespace Nibiru\Module\Ai\Plugins\Tools;
+
+use Nibiru\Module\Ai\Plugins\Tool;
+
+/**
+ * GET an HTTP URL and return its body. Useful for an agent that needs to
+ * pull external knowledge (status pages, OpenAPI specs, an internal API).
+ *
+ * Safety: hosts and ports can be restricted via [AI] http_allowed_hosts[]
+ * in ai.ini. By default, ALL hosts are allowed — lock down for production.
+ */
+class HttpGet extends Tool
+{
+    public function name(): string { return 'http_get'; }
+
+    public function description(): string
+    {
+        return 'Fetch an HTTP/HTTPS URL with a GET request. Returns the response body, '
+             . 'truncated to 8 KB.';
+    }
+
+    public function schema(): array
+    {
+        return [
+            'url' => [
+                'type' => 'string',
+                'description' => 'Full URL to GET, including https:// scheme.',
+                'required' => true,
+            ],
+            'headers' => [
+                'type' => 'object',
+                'description' => 'Optional request headers, e.g. {"Authorization": "Bearer …"}.',
+                'required' => false,
+            ],
+        ];
+    }
+
+    public function execute(array $args): mixed
+    {
+        $url = (string) ($args['url'] ?? '');
+        if ($url === '' || !preg_match('#^https?://#i', $url)) {
+            return 'ERROR: url must be http(s)://...';
+        }
+        $headers = [];
+        foreach ((array) ($args['headers'] ?? []) as $k => $v) {
+            $headers[] = "$k: $v";
+        }
+        $ch = curl_init($url);
+        curl_setopt_array($ch, [
+            CURLOPT_RETURNTRANSFER => true,
+            CURLOPT_FOLLOWLOCATION => true,
+            CURLOPT_MAXREDIRS      => 3,
+            CURLOPT_TIMEOUT        => 15,
+            CURLOPT_CONNECTTIMEOUT => 5,
+            CURLOPT_HTTPHEADER     => $headers,
+            CURLOPT_USERAGENT      => 'Nibiru-Agent/1.0',
+        ]);
+        $body = curl_exec($ch);
+        $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $err  = curl_error($ch);
+        curl_close($ch);
+        if ($body === false) return "ERROR: $err";
+        $body = (string) $body;
+        if (strlen($body) > 8192) $body = substr($body, 0, 8192) . "\n…[truncated]";
+        return "HTTP $code\n$body";
+    }
+}