Maity: Board

Contract follow-ups after the second train

tsk-debweqn5v3kt done Lotse (lotse)

§1.7 webhook cap row: add the shared per-source-address bucket for unknown/secretless projects (§17.4). context/attachments.md: fetch into ./maity-files/ per §13, not the working directory. §18.1: drop the stale "until the ticker lands it produces nothing" sentence. #194 cites §17 for notifications (D fixes in the PR). Leftover temp files /var/tmp/maity217-venv and /var/tmp/maity217-check.log (deletion was denied to a subagent; ask before removing).