docs: reconcile personal-agent secondbrain apply route

docs/contracts/personal-agent-bluebubbles-binding.json

@@ -28,7 +28,7 @@
     "forbidden": [
       "orgbrain"
     ],
-    "durable_write_policy": "proposal-only-until-governed-secondbrain-curator-apply-route"
+    "durable_write_policy": "proposal-only; governed Secondbrain apply route is defined but live apply remains approval-gated"
   },
   "allowed_effects": [
     "read_message_stream",
@@ -74,6 +74,7 @@
       "contracts/personal-agent-imessage-readonly-contract.json",
       "contracts/runtime-compliance-boundary.json",
       "contracts/secondbrain-proposal-envelope-contract.json",
+      "../secondbrain/docs/integration/2026-06-14-secondbrain-personal-agent-imessage-apply-contract.md",
       ".sot/08-OUTPUTS/bluebubbles-live-service-package-proof.json",
       ".sot/08-OUTPUTS/bluebubbles-always-on-resilience-proof.json",
       "runtime/steev/hermes-personal-agent-bluebubbles.service",
@@ -82,6 +83,7 @@
   },
   "remaining_gates": {
     "seed_package_pickup": "blocked-follow-up",
+    "secondbrain_governed_apply_route": "defined-no-live-apply",
     "secondbrain_durable_apply": "blocked-follow-up",
     "desktop_adapter_exposure": "blocked-follow-up",
     "browser_webwright_host_runtime": "separate-hitl-approval"