Add an organization-level /identity/ adoption and asset-discovery view

[szmyty]

Outcome

Add a first-class organization-level /identity/ module that summarizes Brand Kit/Identity adoption, freshness, compatibility, and safe public asset discovery across the repository fleet without centralizing canonical identity packages.

This is a bounded child of #27 and #30.

Primary question

Which repositories have an applicable, current, and compatible Identity package; where are the canonical public assets/tokens; and which repositories need attention?

Data and ownership

Consume safe Identity/Hygiene conformance summaries from Observatory rather than scanning repositories or copying Brand Kits into the organization site. Identity remains the semantic owner of tokens, assets, voice, and generated packages.

Required experience

• Repository identity applicability, package/profile version, adoption state, freshness, and represented revision.
• Safe links to repository identity surfaces, canonical Brand Kit sources, public asset packages, and remediation work.
• Filters by repository class/profile/lifecycle, identity version, state, and freshness.
• Explicit current, partial, drifted, migration-planned, stale, missing, blocked, exempt, unknown, unavailable, incompatible, private, and not-applicable states.
• Public asset-discovery metadata only; no private drafts or unreleased/private repository leakage.
• Cross-links to Hygiene, Releases/Distribution, repositories, and canonical Identity documentation.

Acceptance criteria

• A canonical organization /identity/ surface is registered through egohygiene/hygiene#25.
• The module consumes normalized Identity/Hygiene evidence rather than becoming an asset source of truth.
• Applicability, package/profile version, adoption state, represented revision, freshness, and owner are visible.
• Current, partial, drifted, migration-planned, stale, missing, blocked, exempt, incompatible, unknown, and not-applicable remain distinct.
• Public assets and tokens link to canonical versioned sources.
• Public output cannot reveal private repositories, draft assets, private Brand Kits, or inferred gaps.
• Repository identity pages and remediation work are directly reachable.
• Current, minimally adopted, drifted, stale, exempt, private, and incompatible fixtures pass.
• Mobile, keyboard, screen-reader, reduced-motion, no-color-only, and large-fleet behavior is verified.

Dependencies / related

• Parent shell: Evolve Organization Intelligence into a modular fleet control plane #27
• Master epic: [EPIC] Finish Repository Intelligence, Organization Intelligence, and site control-plane surfaces #30
• Route registry: Define the canonical public-site surface and route registry hygiene#25
• Fleet conformance model: Publish a Hygiene conformance dashboard for every repository observatory#5
• Canonical Identity implementation: https://github.com/egohygiene/identity

Non-goals

• Copying all Brand Kit content into the organization site.
• Editing or generating identity assets.
• Treating Identity as applicable to every repository.
• Publishing private or unreleased assets.
• A visual-brand score.