Add M1 plan, given tests and fixtures, AGENTS.md and implementer log

Seven task files for the implementing model under docs/plans/M1/, with
the test files, byte-exact fixtures, Makefile, deny.toml and gate-script
self-test they copy into place. All of it was verified against a private
reference implementation: the gate passes after every task in order.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

docs/plans/M1/files/crates/proto/tests/fixtures/wire/error.json

@@ -0,0 +1 @@
+{"v":1,"id":0,"final":true,"msg":{"kind":"error","body":{"code":"bad_version","detail":"expected 1"}}}

docs/plans/M1/files/crates/proto/tests/fixtures/wire/tool_request.json

@@ -0,0 +1 @@
+{"v":1,"id":7,"final":true,"msg":{"kind":"tool_request","body":{"session":"mm-thread-42","call":3,"tool":"read_file","arguments":"{\"path\":\"/etc/hosts\"}"}}}

docs/plans/M1/files/crates/proto/tests/fixtures/wire/tool_response_denied.json

@@ -0,0 +1 @@
+{"v":1,"id":9,"final":true,"msg":{"kind":"tool_response","body":{"status":"denied","reason":"taint_too_high"}}}

docs/plans/M1/files/crates/proto/tests/fixtures/wire/tool_response_failed.json

@@ -0,0 +1 @@
+{"v":1,"id":8,"final":true,"msg":{"kind":"tool_response","body":{"status":"failed","message":"exit status 2"}}}

docs/plans/M1/files/crates/proto/tests/fixtures/wire/tool_response_pending.json

@@ -0,0 +1 @@
+{"v":1,"id":7,"final":false,"msg":{"kind":"tool_response","body":{"status":"pending_approval","approval":"ap-0001","expires":"2026-09-17T08:35:00.000Z"}}}

docs/plans/M1/files/crates/proto/tests/fixtures/wire/tool_response_result.json

@@ -0,0 +1 @@
+{"v":1,"id":7,"final":true,"msg":{"kind":"tool_response","body":{"status":"result","content":"127.0.0.1 localhost\n","class":"private","untrusted":true,"truncated":false}}}