pin: dev-department ref → v1.0.0 (first stable atomized release)

Pins the molecule-ai/molecule-dev-department subtree fetch to the
v1.0.0 tag (SHA 6c3d8fac) instead of tracking main. Locks production
imports of this template to the verified-stable atomized shape:
28 workspaces, 5 sub-team-leads, validator passes --strict.

VERIFIED LOCALLY 2026-05-08
  --- PASS: TestPinV1_Verify (0.54s)
  post-pin parent (ref: v1.0.0) → 39 workspaces
  cache: git.moleculesai.app__molecule-ai__molecule-dev-department/6c3d8fac

VERSIONING CONTRACT (set by the v1.0.0 tag)
  v1.0.0   first stable atomized shape (this pin)
  v1.0.x   persona/prompt edits, no structural change
  v1.x.0   additive workspaces (new sub-team, new role)
  v2.0.0   breaking structure change (sub-team rename, removal)

  To roll a non-breaking dev-tree update into this template, bump the
  ref above to the new tag (e.g. v1.0.1, v1.1.0). Major bumps need a
  parent-template review since they may break existing tenants on
  this template.

Refs:
  internal#77 — extraction RFC
  molecule-ai/molecule-dev-department v1.0.0 tag (annotated, with release notes)
  Hongming GO 2026-05-08 ('do both follow-up recommendations')

org.yaml

@@ -151,11 +151,11 @@ workspaces:
   # Platform fetches molecule-ai/molecule-dev-department at import time into a
   # content-addressable cache under <orgBaseDir>/.external-cache/. No operator-
   # side filesystem symlink, no sibling-clone deploy contract — the import is
-  # self-contained. To pin a specific tag/SHA in production, change `ref: main`
-  # below (e.g. `ref: v1.0.0`).
+  # self-contained. Pinned to v1.0.0 (first stable atomized release;
+  # see molecule-ai/molecule-dev-department tags for newer versions).
   - !external
     repo: molecule-ai/molecule-dev-department
-    ref: main
+    ref: v1.0.0
     path: dev-lead/workspace.yaml
 
 template_schema_version: 1