- **One glob matcher for the whole workspace (#3265).** Seven divergent
  `glob_match` implementations (invariant globs, metadata scan, model
  config/capability patterns, hook routing, mock prompt patterns, skills
  triggers) consolidated into the new `harn-glob` crate with three explicit
  contracts (`match_path`, `match_name`, `match_prose`). Model and hook
  patterns now share full glob syntax (`*`, `?`, `[..]`), and path globs
  uniformly treat `**/` as matching zero directories.
