chore(commitlint): scope-enum back as warning with broader list

Restore the explicit list of encouraged scopes so contributors and the AI
pipeline have a clear menu, but keep it at level `warning` (1) instead of
`error` (2) so a new scope doesn't block the commit. Adds tooling scopes
(`release-please`, `ci`, `deps`, `lefthook`, `commitlint`, `contributing`,
`docs`, `security`, `test`) that recently produced false positives.

Update `aidd_docs/memory/vcs.md` to point at `commitlint.config.cjs` as
the source of truth and mirror the encouraged scope list so the AI
follows the same vocabulary when composing commits.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: blafourcade

aidd_docs/memory/vcs.md

@@ -36,6 +36,10 @@ chore/release-please-config
 
 ## Commit Convention
 
+### Source of truth
+
+The repo's `commitlint.config.cjs` enforces the format and lists the encouraged scopes (read it before composing a commit message). The summary below mirrors that file; if the two disagree, the config wins.
+
 ### Format
 
 ```text
@@ -60,6 +64,18 @@ type(scope): description
 | `style` | Formatting (no logic change) |
 | `ci` | CI/CD configuration |
 | `revert` | Revert previous commit |
+| `build` | Build system or external deps |
+
+### Scopes
+
+Scope is optional. When provided, it MUST be kebab-case (enforced by `scope-case`). A whitelist of encouraged scopes lives in `commitlint.config.cjs` (`scope-enum`) at the `warning` level: an unknown scope produces a warning but does NOT block the commit. Use a known scope whenever it fits; introduce a new one only when no existing scope describes the change.
+
+Encouraged scopes (kept in sync with `commitlint.config.cjs`):
+
+- **Plugin (long form)**: `aidd-context`, `aidd-dev`, `aidd-vcs`, `aidd-pm`, `aidd-refine`, `aidd-orchestrator`
+- **Plugin (short form)**: `context`, `dev`, `vcs`, `pm`, `refine`, `orchestrator`
+- **Root**: `framework`, `marketplace` (these bump `marketplace.json` via release-please)
+- **Tooling**: `release-please`, `ci`, `deps`, `lefthook`, `commitlint`, `contributing`, `docs`, `security`, `test`
 
 ### Description rules
 
@@ -73,6 +89,8 @@ type(scope): description
 feat(orchestrator): per-developer Anthropic account routing
 fix(orchestrator): SDLC owns push + PR
 refactor(aidd-pm): restructure spec into build and refine actions
+chore(release-please): register orchestrator and refine packages
+ci(framework): drop version.txt from tarball step
 ```
 
 ### Breaking Change

commitlint.config.cjs

@@ -1,9 +1,42 @@
 module.exports = {
   extends: ["@commitlint/config-conventional"],
   rules: {
-    // Type still validated by config-conventional (feat, fix, chore, docs, refactor, perf, test, build, ci, revert, style).
-    // Scope is optional and free-form: any kebab-case slug (or empty) is accepted.
+    // Type validated by config-conventional (feat, fix, chore, docs, refactor, perf, test, build, ci, revert, style).
+    // Scope is optional. When provided, must be kebab-case. Known scopes below are encouraged but not required
+    // (the rule level is `warning` = 1, so a non-listed scope is reported but does NOT block the commit).
     "scope-case": [2, "always", "kebab-case"],
+    "scope-enum": [
+      1,
+      "always",
+      [
+        // Plugin scopes (long + short forms)
+        "aidd-context",
+        "aidd-dev",
+        "aidd-vcs",
+        "aidd-pm",
+        "aidd-refine",
+        "aidd-orchestrator",
+        "context",
+        "dev",
+        "vcs",
+        "pm",
+        "refine",
+        "orchestrator",
+        // Root scopes (touching marketplace.json or framework-wide config)
+        "framework",
+        "marketplace",
+        // Tooling & infra scopes
+        "release-please",
+        "ci",
+        "deps",
+        "lefthook",
+        "commitlint",
+        "contributing",
+        "docs",
+        "security",
+        "test",
+      ],
+    ],
     "body-max-line-length": [0, "always"],
     "footer-max-line-length": [0, "always"],
   },