Vault ecosystem auto-setup on first activate (personal + public vault, mounts.toml) (#312)

[aarontrowbridge]

Closes #312.

Follow-up to #307 (armonia workspace). New Marketplace users get a working vault ecosystem with zero commands.

• vault_setup.ts: ensureVaultEcosystem() — idempotent, never throws: ensureArmoniaDataDirs + ensurePersonalVault (no-op if exists) + ensurePublicVault (shallow clone harmoniqs/vault-public with 10s cap, placeholder if offline/no-git) + ensureMountsToml (absent-only, personal rw first, public ro second).
• extension.ts: call it before the first prepareOpencodeProject so the mount stack is correct on boot; remove now-redundant ensureDefaultPersonalVault.
• trees.ts: update Armonia placeholder to reflect auto-provision (personal + vault-public after first run).
• tools/bootstrap-armonia.sh: mirror same three vault steps as idempotent block (CLI/extension order agnostic), curl-able.
• tools/migrate-to-armonia.sh: three-bucket repos routing (packages/, demos/, flat), bucket-converging on re-run.
• skills/amico-vault/SKILL.md: vault-* naming in kinds table, new First-run lifecycle subsection for vault-public (kind=public, ro).

Verification: rm -rf ~/.amico ~/armonia && install + open → personal + public present, mounts.toml written, second activate no-op, offline degrades to placeholder.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: b868d93b-fbe9-44e0-ab2f-1c5241a7ec69

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}