docs: re-key architecture docs off the alknet mono-repo — speak as alkcall

The ported docs still framed alknet siblings (alknet-core/-call/-channels/
-http/-tls/-client) as live load-bearing context of this crate. With the
extraction complete and alknet headed for glue-level replacement, the docs
now speak as alkcall and cite the real sibling crates (alkhttp, alktls,
alktty, alktunnels, alktrader).

- ADR-054 (new): re-own the verifier-selection rule in-crate — three
  remote roles (public X.509 endpoint / transport relay / hub),
  ServerCertVerifier by PeerEntry presence, RemoteIdentity None
  load-bearing. Provenance: alknet ADR-034 (never ported), demoted to
  footnote. Resolves OQ-21's cross-repo authority gap.
- OQ-43 (new, deferred(scope)): composition-layer ownership and shape
  after the alknet replacement — the named receiver for the
  downstream-side deferrals (OQ-33 endpoint layer, OQ-41 QUIC-native
  substrate, OQ-42 hub broker, OQ-19 persistence adapters, ADR-045 dial
  seam). README layering diagram redrawn with the composition layer as
  TBD-ownership instead of "alknet / alknode" in concrete.
- Spec docs reframed: titles, self-references, dial/TLS/from_jsonschema
  homes, malformed legacy cite rows removed; dead relative research
  paths qualified as source-repo paths.
- ADR amendments (append-only): 027 (alknet-http -> alkhttp), 031 (post-
  extraction state), 044 (split landed as modules in alkcall), 045
  (name normalization; citation-space note).
- Citation hygiene: unprefixed/colliding source-repo cites prefixed
  ("alknet ADR-NNN (provenance)") across 009/011/022/034/035/038/040/
  043/044/045; stale OQ cites corrected (session registries OQ-04, batch
  semantics OQ-03, verifier rule ADR-054); stale anchors fixed.
- README provenance note consolidated; citation conventions documented.

Verification: markdown link check (all local links resolve, all in-crate
ADR cites point at existing decisions/ files); table integrity check
(uniform row widths across open-questions.md and edited tables); residual
alknet-mention sweep (only provenance/historical/intentional framing
remains); architecture review subagent pass with zero remaining criticals.
Docs-only change — no code paths touched.

docs/architecture/decisions/034-channels-wire-format.md

@@ -22,7 +22,7 @@ JSON, tunnel's raw bytes, SSH's channel protocol).
 
 The stream_type decomposition (unidirectional halves, mod 3 formula, 85
 groups) is **removed from the channels layer**. The stream_type concept
-survives in TTY's 5-byte format (ADR-052, amended by Phase 7), which the
+survives in the TTY 5-byte format (alknet ADR-052, provenance — amended by Phase 7), which the
 channels layer carries transparently in its payload. The total header
 for a TTY chunk inside channels is 13 bytes (8 channels + 5 TTY), not
 9; the two length fields are close but not identical
@@ -47,7 +47,7 @@ Two prior formats inform this design:
 1. **SSH's channel multiplexer (RFC 4254)** — `ChannelId(u32)` with
    string-named types negotiated per channel, all traffic interleaved on one
    encrypted transport stream.
-2. **alknet-tty's chunk format (ADR-052)** — `[stream_type: u8][length: u32 be]
+2. **alknet-tty's chunk format (alknet ADR-052, provenance)** — `[stream_type: u8][length: u32 be]
    [payload]`, a fixed set of four sub-streams (stdin/stdout/stderr/control)
    within one bidi stream. Validated by two POCs and in production code.
 
@@ -100,18 +100,18 @@ client→server) and 4 (read, server→client), not one "bidirectional" 3.
 ```
 
 9 bytes of header. The `channel_id` is the addition over TTY's 5-byte
-format; `stream_type` and `length` are identical to TTY's fields (ADR-052),
+format; `stream_type` and `length` are identical to TTY's fields (alknet ADR-052, provenance),
 preserving the framing-disambiguation soundness property.
 
 | field | width | meaning |
 |-------|-------|---------|
 | `channel_id` | u32 BE | The logical channel this chunk belongs to. Channel 0 is pre-negotiated as `alk/call` (ADR-036). Channels 1..N are opened dynamically via `channel/open`. |
 | `stream_type` | u8 | The unidirectional sub-stream within the channel. See "Stream types" below. |
-| `length` | u32 BE | The payload length in bytes. 0 = EOF sentinel (same convention as TTY — ADR-052 §Sentinels). |
+| `length` | u32 BE | The payload length in bytes. 0 = EOF sentinel (same convention as TTY — alknet ADR-052 §Sentinels (provenance)). |
 
 ### `MAX_CHUNK_LEN`
 
-`16 * 1024 * 1024` (16 MiB), matching TTY's cap (ADR-052 §5). A chunk with
+`16 * 1024 * 1024` (16 MiB), matching TTY's cap (alknet ADR-052 §5, provenance). A chunk with
 `length > MAX_CHUNK_LEN` returns `ChunkTooLarge` and does not corrupt the
 stream — the demux drops the chunk and continues. The header is always
 exactly 9 bytes, so the demux can always resync by reading the next 9-byte
@@ -214,7 +214,7 @@ the cost of uniformity. For the intended use cases (TTY, SSH, tunnels, call
 operations), this is noise. The high-throughput escape hatch is
 multi-connection, not stripping the header.
 
-### Framing disambiguation (carried from ADR-052 §5)
+### Framing disambiguation (carried from alknet ADR-052 §5, provenance)
 
 Channel 0 is just another channel — its chunks have `channel_id=0` in the
 header. Disambiguation between channel 0 (call protocol) and data channels
@@ -225,7 +225,7 @@ first byte of a chunk payload from the server is unambiguous.
 ### Zero-length sentinel = EOF
 
 A zero-length chunk is delivered as an empty `Bytes`, which the reassembled
-stream interprets as EOF (same convention as TTY — ADR-052 §Sentinels). This
+stream interprets as EOF (same convention as TTY — alknet ADR-052 §Sentinels (provenance)). This
 is the clean-shutdown signal for a `(channel_id, stream_type)` pair.
 
 ### Sync core / async shell split
@@ -251,7 +251,7 @@ tokio-dependent shell.
 - The hub relay correlates by `channel_id` in the header, uniformly across
   substrates — no stream-ID-to-`channel_id` mapping per leg.
 - WASM-compatible by construction — the pure core has no platform deps.
-- The framing-disambiguation property from ADR-052 carries forward unchanged.
+- The framing-disambiguation property from alknet ADR-052 (provenance) carries forward unchanged.
 
 **Negative:**
 - 9 bytes per chunk on all substrates, including QUIC where the transport
@@ -288,7 +288,7 @@ within the one-way format.
   wire format is 8 bytes, not 9; `stream_type` removed from the channels
   header; the stream_type decomposition is removed from the channels
   layer; the handler owns its sub-stream multiplexing on the `BiStream`)
-- ADR-052: alknet-tty wire format (the 5-byte format this generalizes;
+- Source-repo provenance (not ported): alknet ADR-052 — alknet-tty wire format (the 5-byte format this generalizes;
   amended by ADR-077 — scoped to direct TTY; **re-amended by ADR-035 —
   TTY always uses its 5-byte format, carried transparently in the
   channels payload**)