[AZ-485] Add Public API barrels + STC-ARCH-01 (F4 close)

Closes architecture baseline finding F4. Every component now exposes
its Public API through `src/<component>/index.ts`; cross-component
imports go through the barrel. `scripts/check-arch-imports.mjs` plus
`STC-ARCH-01` in the static profile enforce the rule; tests in
`tests/architecture_imports.test.ts` cover AC-4/AC-5 + 2 exemption
cases. One F3-pending exemption (`classColors`) is documented in 5
places (barrel, consumer, script, doc, test) to avoid a circular
import.

Phase B cycle 1 batch 1 of 2 (epic AZ-447). Batch 2 is AZ-486
(endpoint builders) — blocked on this commit landing.

Co-authored-by: Cursor <cursoragent@cursor.com>

_docs/_autodev_state.md

@@ -4,11 +4,11 @@
 flow: existing-code
 step: 10
 name: Implement
-status: not_started
+status: in_progress
 sub_step:
-  phase: 0
-  name: awaiting-invocation
-  detail: "Step 9 closed; AZ-485 (F4 barrels) + AZ-486 (F7 endpoints) ready in todo/; AZ-485 first (AZ-486 depends on barrel)"
+  phase: 7
+  name: batch-9-cycle1-az485-complete
+  detail: "AZ-485 (F4 barrels) implemented + reviewed; batch_09_report saved; archive done; AZ-486 is the next batch in cycle 1"
 retry_count: 0
 cycle: 1
 tracker: jira
@@ -23,7 +23,7 @@ step_3_ac_gap_handling: rollback-to-6c (option A)
   `glossary.md`, plus `_docs/01_solution/solution.md` and
   `_docs/00_problem/{problem,acceptance_criteria,restrictions,security_approach}.md`.
 - Implement-skill batch reports at
-  `_docs/03_implementation/batch_0{1..8}_report.md`.
+  `_docs/03_implementation/batch_0{1..9}_report.md` (batch 09 = AZ-485 cycle-1 batch-1).
 - Cumulative reviews PASS_WITH_WARNINGS at
   `_docs/03_implementation/cumulative_review_batches_01-03_report.md`,
   `_docs/03_implementation/cumulative_review_batches_04-06_cycle1_report.md`,
@@ -33,4 +33,9 @@ step_3_ac_gap_handling: rollback-to-6c (option A)
   - AZ-485 (F4 — Public API barrels + STC-ARCH-01, 5 pts, no deps)
   - AZ-486 (F7 — Endpoint builders + STC-ARCH-02, 5 pts, blocked by AZ-485)
   - F1 (mission-planner convergence) deliberately not created — needs `/decompose` for 7+ port-group cycles in its own Epic.
-- Step 10 (Implement) starts with AZ-485 — `Blackbox Tests` owns the static-check addition and the `tests/**` import-path migration; production component teams own their barrel files per `module-layout.md`.
+- Step 10 (Implement) batch 9 (AZ-485) done:
+  - 11 new barrels, ~40 production deep imports migrated, ~22 test deep imports migrated.
+  - `scripts/check-arch-imports.mjs` + `STC-ARCH-01` static gate added (mirrors the `check-banned-deps.mjs` pattern).
+  - `tests/architecture_imports.test.ts` covers AC-4 / AC-5 + 2 exemption cases (4 new fast tests; total 167 PASS / 13 SKIP / 0 FAIL).
+  - One F3-pending exemption: `src/features/annotations/classColors` is imported directly (circular-barrel avoidance), documented in 5 places.
+  - Next: AZ-486 (endpoint builders) — depends on AZ-485 commits landing first.