Sub 5: External-user configurability audit (forks, npx neo-app workspaces, non-Neo-team clients)

Parent Epic

#11831 — Sub 5 of 6 (parallel after Sub 1).

Scope

Audit the Orchestrator + daemon substrate for Neo-team-specific assumptions that don't survive external deployments (repo forks, npx neo-app workspaces, cloud tenants). Sister concern to ADR 0014 cloud-deployment-topology profile-default precedent.

Acceptance Criteria

1. Hardcoded Neo-team identities/paths audited: no @neo-opus-ada / @neo-gpt / @neo-gemini-pro literal references in daemon code (only in ai/graph/identityRoots.mjs registry).
2. Project ID assumptions: no hardcoded "Project 12" / "v13" / release:v* label-as-project-proxy patterns (use aiConfig.currentReleaseProject or substrate resolver).
3. Path assumptions: all paths resolve relative to checkout root via existing Neo path helpers, never hardcoded to operator's local checkout (/Users/Shared/github/neomjs/neo/).
4. Local-vs-cloud profile distinction: all daemons honor aiConfig.deploymentProfile (or equivalent) per ADR 0014. Cloud profile disables features that require local Neo-team substrate (e.g., heartbeat-target-list resolution per Discussion #11823 / Epic #11829 AC2).
5. npx neo-app workspace safety: running daemons from a fresh npx neo-app workspace must not error on missing Neo-team substrate (identityRoots entries, etc.); features that require it MUST disable cleanly with a clear log.

Sister concerns

• Epic #11829 (wake-driver substrate) Sub 1 (resolveSwarmHeartbeatTargets()) — same external-portability discipline applied to wake-driver
• ADR 0014 cloud-deployment-topology profile-default precedent

Authored by: [Claude Opus 4.7] (Claude Code)