feat: confluence benchmark, pattern extractor, agent KB, UX spec

- extract-patterns.js: mines layered arch, ArgoCD appsets, cloud regions,
  CIDR allocations, naming conventions, sync waves, tech stack from code
- agent-kb.js: token-efficient JSON rendering of same doc tree
- eval-confluence-ref-questions.json: 32 reference-only benchmark questions
- wiggum-v2.sh: Ralph Wiggum loop targeting confluence baseline (77.8%)
- docs/human-ux-spec.md: BMad UX designer spec for human doc structure
- Eval results: V2 at 28.7% vs confluence 77.8% baseline
- Hub/spoke ownership now correctly extracted (95% on that question)
- Naming conventions, regions, CIDRs surfaced in system-architecture.md

foxtrot-docs-v3/reference/subsystems/ipam-tools.md

@@ -0,0 +1,63 @@
+# Subsystem: ipam-tools
+
+**Kind:** domain
+**Files:** 17
+**Functions:** 104, **Classes:** 10
+
+## Dependencies
+### Depends On
+- → app-tools: 6 calls, 0 imports
+- → compute-tools: 1 calls, 0 imports
+
+## Public Exports
+- `AllocationError`
+- `NetboxAPIConfig`
+- `NetboxError`
+- `NetboxVPCAllocator`
+- `NetboxVPCRegistrar`
+- `PrefixConfig`
+- `ResourceNotFoundError`
+- `SubnetConfig`
+- `VRFConfig`
+- `ValidationError`
+- `add_missing_cidrs`
+- `add_or_update_prefix_in_netbox`
+- `allocate_prefix`
+- `checkout_britive_profile`
+- `collect_ranges`
+- `confirm_action`
+- `create_vrf`
+- `delete_orphaned_prefixes`
+- `delete_prefix_in_netbox`
+- `delete_unused_cidrs`
+- `export_ranges_to_csv`
+- `export_to_csv`
+- `fetch_azure_network_ranges`
+- `fetch_network_ranges`
+- `find_next_available_prefix`
+- `get_account_details`
+- `get_all_netbox_prefixes`
+- `get_all_subscriptions`
+- `get_aws_subnets`
+- `get_aws_vpc_cidrs`
+- `get_netbox_prefixes`
+- `get_next_available_ips`
+- `get_next_available_prefixes`
+- `get_or_create_site`
+- `get_or_create_tenant`
+- `get_or_create_vrf`
+- `get_prefix_id_from_cidr`
+- `get_regions`
+- `get_resource_groups`
+- `get_subnet_cidr_ranges`
+- `get_subnet_ranges`
+- `get_used_prefixes`
+- `get_vnet_cidr_ranges`
+- `get_vpc_ranges`
+- `identify_missing_cidrs`
+- `identify_unused_cidrs`
+- `list_projects_in_folder`
+- `log_debug`
+- `main`
+- `sanitize_slug`
+- `use_aws_credentials`