Add IT-One AI agent template, eval gate, and deployment skeleton

docs/system-architecture.md

@@ -0,0 +1,14 @@
+# System architecture
+
+```mermaid
+flowchart LR
+  Input[User request] --> Core[Agent graph]
+  Core --> Prompt[Versioned prompts]
+  Core --> Tools[External tools]
+  Core --> Memory[Memory / RAG]
+  Core --> Output[Validated response]
+  Evals[Offline evals] --> Gate[PR quality gate]
+  Gate --> Core
+```
+
+The core must keep orchestration deterministic enough to test. Tools should have explicit schemas and timeouts. Memory adapters must make retention and deletion behavior visible.

docs/tool-definitions.md

@@ -0,0 +1,8 @@
+# Tool definitions
+
+Every tool should document its input schema, output schema, timeout, retry policy, authentication source, and failure mode. Production credentials come from Gitea Actions secrets, never from source files.
+
+| Tool | Purpose | Failure policy |
+| --- | --- | --- |
+| CRM client | Read or update customer records | Fail closed; redact identifiers |
+| Web search | Retrieve public references | Timeout and cite sources |