chore: authorize Creator advisory routing promotion

dev/ACTIVE_TASK.json

@@ -1,5 +1,5 @@
 {
-  "task_file": "dev/tasks/DEV-000053-creator-openai-mode-a-routing.json",
-  "task_id": "DEV-000053",
+  "task_file": "dev/tasks/DEV-000054-promote-creator-advisory-routing.json",
+  "task_id": "DEV-000054",
   "task_revision": 1
 }

dev/tasks/DEV-000054-promote-creator-advisory-routing.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000054",
+  "task_revision": 1,
+  "architecture_revision": "ADR-0007",
+  "base_repo_revision": "6fea0bd674f7068d51c6c15e811e3508e4b4e85a",
+  "risk_tier": "E",
+  "intent": "Promote the exact merged Creator advisory Mode A routing implementation to docker-prod while retaining the deterministic production mode, absent OpenAI credential, disabled OpenAI endpoint, and all existing canonical volumes and production bindings.",
+  "requirement_ids": ["ADR-0007", "DEV-000045", "DEV-000052", "DEV-000053", "INV-EPI-001"],
+  "allowed_change_scope": {"modules": [], "paths": ["dev/ACTIVE_TASK.json", "dev/tasks/DEV-000054-promote-creator-advisory-routing.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "ci/**", ".gitea/**", "contracts/**", "modules/**", "adapters/**", "cmd/**", "database/**", "deploy/**", "docs/**", "security/**", "tests/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0},
+  "contracts": {"consume": ["creator-advisory-v1", "ADR-0007", "production artifact provenance"], "may_change": []},
+  "semantic_owner": "none-promotion-only",
+  "canonical_state": [],
+  "state_transitions": [],
+  "side_effects_and_privileges": ["rebuild and replace the seven project-owned containers on docker-prod from exact merged main", "refresh external deployment manifests", "retain deterministic Creator Web advisory routing and no OpenAI secret or provider activation"],
+  "persistence_and_migrations": [],
+  "failure_retry_restart": ["existing canonical volumes and secrets remain mounted unchanged", "failed promotion does not publish a new manifest", "OpenAI endpoint remains 503 and deterministic advisory remains available after restart"],
+  "assumptions": ["production does not set ADVISORY_BINDING_MODE", "production contains no OPENAI_API_KEY or OPENAI_API_KEY_FILE configuration", "docker-test remains prohibited"],
+  "acceptance_scenarios": ["all seven project images carry exact merged main revision", "production health remains healthy", "authenticated advisory policy reports deterministic mode", "OpenAI endpoint returns 503", "deterministic advisory returns PROVIDER_UNAVAILABLE", "cognitive worker has no OpenAI/provider credential environment or mount", "Creator Web has no ADVISORY_BINDING_MODE override"],
+  "required_tests": ["architecture preflight", "exact diff scope", "CI", "exact artifact confirmation", "production health", "authenticated deterministic policy smoke", "disabled OpenAI endpoint smoke", "deterministic advisory smoke", "cognitive and Creator Web isolation inspection"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_CONFLICT"]
+}