[smith-xyz]

Lands the repository layer for the one-owner data model (XWING-2363).

What changed

• Models are the contract tables. One model per table, grouped by section (models/{inventory,dependencies,assessment,findings,operations,ledger}.py), fields = columns.
• One repository per table. repositories/traust/<section>/<table>.py, repositories/traust_ops/, repositories/traust_ledger/ mirror the contracts namespaces. A TableSpec declares columns once; TableFactory builds each table per dialect (Postgres schemas, SQLite ops_/ledger_ prefixes). The base gives add/get/update; every other method is a named query on its table.
• One transaction across sections. SqlTraustUnitOfWork opens all 31 repositories on one connection; services declare the narrow section protocol they need.
• Retired: the stub repositories, the duplicate entity models, and the traust_storage lane (storage/triage repositories and services). The publisher's database index now writes an artifact row.
• Object storage moved to repositories/objects/.
• models.artifacts.Artifact renamed to ArtifactDocument; Artifact is the artifact table row.
• Contracts pinned to 42a6367 (traust-contracts #49): base-column timestamps use statement_timestamp().

Tests

Repository behaviour on SQLite and Postgres (make test-repositories): save / get / update for every table, each query, unit-of-work commit and rollback, and concurrent run_order.claim on Postgres. No tests restate the DDL; contracts owns that.

Agent context (AGENTS.md, traust-core-patterns skill) and the README describe the new layout.