docs: fix architecture-index and front-matter reference drift

[github-actions]

Agent Documentation Update

Findings

Area	Issue	File(s)
accuracy	src/safe_outputs/assign_work_item.rs exists (implements the assign-work-item safe output, already documented in docs/safe-outputs.md) but was missing from the safe_outputs/ module listing in the AGENTS.md architecture tree	AGENTS.md
structure	permissions-required: (the PermissionsRequired { read, write } front-matter field in src/compile/types.rs) is only shown in docs/imports.md; the main front-matter field reference/example in docs/front-matter.md had no mention of it, making it hard to discover alongside permissions:	docs/front-matter.md

Applied Fixes

• Added assign_work_item.rs to the safe_outputs/ file listing in AGENTS.md, alphabetically placed next to assign_github_issue_to_user.rs
• Added a commented permissions-required: example block in docs/front-matter.md right after the permissions: block, cross-linking to docs/imports.md#permissions-required for full semantics

Notes

Verified by diffing find src -name '*.rs' against every filename referenced in AGENTS.md's architecture tree — assign_work_item.rs was the only safe-output module actually missing (all compile/ir/tasks/*.rs files are intentionally summarized rather than enumerated, per the existing tasks/ comment). Verified the PermissionsRequired struct shape (read: bool, write: bool) directly in src/compile/types.rs before writing the new example. No source/config files were touched; git diff --name-only confirms only AGENTS.md and docs/front-matter.md changed.

---

Created by the agent-documentation maintainer workflow.

Generated by Agent Documentation Maintainer · auto · 76.6 AIC · ⌖ 12.4 AIC · ⊞ 13.5K · ◷

[azure-pipelines]

Azure Pipelines:
2 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.