Update org harness/model/effort and PR review policy per board directive

Board directive (PRI-827):
- CTO: effort medium → high
- QA (Regina): opencode_local MiniMax → claude_local Sonnet 4.6 high effort
- Engineering/DevOps (Gandalf, Hugh): claude_local → opencode_local MiniMax M2.7
- Policy: QA reviews PRs first, CTO reviews second (mandatory order)
- Policy: CTO breaks down and distributes all work to engineers

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

engineering/hugh/CONFIG.md

@@ -1,6 +1,8 @@
 # Hugh Hackman — Config
 
 > This file is the operational backup. The active prompt is split across AGENTS.md, SOUL.md, and HEARTBEAT.md.
+>
+> **Note:** Uses the `opencode_local` adapter with MiniMax M2.7 via OpenRouter. Prompt lives as `promptTemplate` in the Paperclip DB. The active prompt is split across AGENTS.md, SOUL.md, and HEARTBEAT.md.
 
 ## Identity
 
@@ -9,7 +11,7 @@
 | ID | `d99be9a8-b584-4bf9-b4eb-0fa11998dbb5` |
 | Role | `devops` |
 | Title | VP Engineering Operations |
-| Adapter | `claude_local` |
+| Adapter | `opencode_local` |
 | Reports To | Null Pointer Nancy (`41b49768-c5c0-4473-8d52-6637de753064`) |
 | Budget | 0 cents/month |
 
@@ -32,19 +34,21 @@
   "cwd": "/workspaces/privilegedescalation/engineering/hugh",
   "env": {
     "HOME": { "type": "plain", "value": "/paperclip/privilegedescalation/agents/engineering/hugh" },
+    "MINIMAX_API_KEY": { "type": "secret_ref", "secretId": "fc5a9197-9084-4478-a63d-b1c00a901f9e" },
+    "OPENROUTER_API_KEY": { "type": "secret_ref", "secretId": "d843133a-0702-4f44-b8e8-43249879995f" },
     "GITHUB_APP_ID_HUGH": { "type": "plain", "value": "3141264" },
     "GITHUB_PEM_PATH_HUGH": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation-engineer.pem" }
   },
-  "model": "claude-sonnet-4-6",
-  "effort": "medium",
-  "graceSec": 15,
-  "timeoutSec": 0,
-  "maxTurnsPerRun": 80,
-  "instructionsFilePath": "/paperclip/privilegedescalation/agents/engineering/hugh/AGENTS.md",
-  "dangerouslySkipPermissions": true
+  "model": "openrouter/minimax/minimax-m2.7"
 }
 ```
 
 ## Capabilities
 
 Owns CI/CD pipelines, container builds, GitHub Actions workflows, and release automation for Privileged Escalation. Does not write plugin application code or run QA — delegates those to Gandalf and Regina respectively. Kubernetes, Helm, Flux, Docker, Linux, infrastructure, GitHub Actions.
+
+## Known Issues (opencode_local adapter)
+
+- **Env + model wipe on UI save**: Saving config via the Paperclip UI wipes `env` and `model`. Restore via DB patch after any UI save.
+- **Prompt UI blank**: The `opencode_local` adapter does not hydrate `promptTemplate` back into the Lexical editor. The prompt is correctly stored in the DB — the blank editor is a display bug.
+- **No `instructionsFilePath`**: The `opencode_local` adapter does not support file-based prompt loading. The prompt must be concatenated from AGENTS.md + SOUL.md + HEARTBEAT.md and set as `promptTemplate` in the DB.