docs(work): decompose platform-retrofit and walking-skeleton epics

platform-retrofit: 8 stories / 18 tasks (spec bundle into docs/product,
single-version release-please before deletions, demo feature removal,
web-next auth shell, optional cores, work-tree archive, library traces,
agent-doc rewrite). walking-skeleton: 11 stories / 28 tasks across
workspaces, discovery, core-runner-protocol, runner app, editor, and
the flagship connect-to-selection e2e; builds on platform-retrofit
(prose dependency note — cross-epic frontmatter unsupported).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016j8z4VHjedXDTjEDNg7qHK

docs/work/epics/platform-retrofit/04-web-next-shell/_story.md

@@ -0,0 +1,45 @@
+---
+id: 04-web-next-shell
+epic: platform-retrofit
+title: Reduce web-next to an auth shell with a boot smoke assertion
+type: technical-story
+status: todo
+feature: web-next
+depends-on: [03-delete-demo-apps-and-features]
+blocks: [08-rewrite-agent-docs]
+created: 2026-07-12T10:22:00Z
+---
+
+## Goal
+
+`apps/web-next` is a compiling shell: auth (sign-in/out) plus a minimal authenticated placeholder home page. The app bootstrap stays intact — `bindAll()`, instrumentation — and a dev-seed boot smoke test asserts `bindAll()` resolves with only auth bound, proving no dangling DI symbols from the deleted features. `apps/cms` (Payload admin over the remaining collections) and `apps/storybook` stay as-is.
+
+## Why
+
+Veect features land on a stable floor: the repo must typecheck/test green with only auth + core packages (PRD user story 4). The workspaces UI that replaces the placeholder arrives with the next PRD (walking skeleton), so the shell needs to prove exactly one thing — sign-in works and nothing references deleted features.
+
+## Done when
+
+- `pnpm dev` boots web-next in dev-seed mode (no Payload required) with sign-in working.
+- The home page is a minimal authenticated placeholder; auth UI surfaces and app bootstrap (`bindAll()`, instrumentation) are untouched.
+- A dev-seed boot smoke test asserts `bindAll()` resolves with only auth bound (mirrors the existing boot-assertion pattern in web-next's server bootstrap tests).
+- The auth sign-in Playwright spec is green as the surviving e2e baseline.
+- `pnpm typecheck && pnpm lint && pnpm test && pnpm conformance && pnpm fallow:audit && pnpm coverage:diff` pass on every commit.
+
+## In scope
+
+- Replacing the web-next home page with a minimal authenticated placeholder; removing any remaining demo-content leftovers in web-next (layouts, nav chrome, metadata).
+- The boot smoke assertion in web-next's server bootstrap tests.
+- Keeping the auth e2e sign-in spec green.
+
+## Out of scope
+
+- The workspaces UI / any new Veect feature surface (walking-skeleton PRD).
+- The landing page (`polish-playground-landing` PRD — this epic leaves no marketing surface).
+- Changes to `apps/cms` or `apps/storybook`.
+- Auth feature changes — its manifest, tests, and coverage bands stay untouched.
+
+## Tasks
+
+- [ ] Replace the web-next home page with a minimal authenticated placeholder, keeping the auth UI surfaces (sign-in/out) and app bootstrap (`bindAll()`, instrumentation) intact, and remove any remaining demo-content leftovers in the app — one commit, all gates green, auth e2e spec still passing.
+- [ ] Add the dev-seed boot smoke assertion: a web-next server bootstrap test proving `bindAll()` resolves with only auth bound (no dangling DI symbols from deleted features), mirroring the existing boot-assertion pattern — one commit, all gates green.