Merge pull request 'migrate(dev-tree): replace dev-lead symlink with !external resolver block (PR-D)' (#6) from migrate/dev-lead-symlink-to-external into main

.gitignore

@@ -19,3 +19,6 @@
 # Workspace auth tokens
 .auth-token
 .auth_token
+
+# Platform .external-cache/ (cross-repo subtree fetch cache, see internal#77)
+.external-cache/

dev-lead

@@ -1 +0,0 @@
-../molecule-dev-department/dev-lead

org.yaml

@@ -147,10 +147,15 @@ defaults:
 workspaces:
   - !include teams/pm.yaml
   - !include teams/marketing.yaml
-  # Dev tree extracted to molecule-ai/molecule-dev-department (internal#77).
-  # The `dev-lead` symlink at this template's root resolves through the
-  # operator-side sibling-clone convention to molecule-dev-department/dev-lead/.
-  # See README §Dev tree composition for the deploy invariant.
-  - !include dev-lead/workspace.yaml
+  # Dev tree composed via gitops `!external` resolver (internal#77 / molecule-core#105).
+  # Platform fetches molecule-ai/molecule-dev-department at import time into a
+  # content-addressable cache under <orgBaseDir>/.external-cache/. No operator-
+  # side filesystem symlink, no sibling-clone deploy contract — the import is
+  # self-contained. To pin a specific tag/SHA in production, change `ref: main`
+  # below (e.g. `ref: v1.0.0`).
+  - !external
+    repo: molecule-ai/molecule-dev-department
+    ref: main
+    path: dev-lead/workspace.yaml
 
 template_schema_version: 1