rewrite 2.0.0: real process — extract the algorithm into DMN

The 1.x package was a single ai.extract call wrapped in three BPMN
service tasks. No decision logic, no dmn cornerstone, no weights — the
risk/routing/validation algorithm lived invisibly in host code. There
was nothing for a runtime to actually execute.

2.0.0 makes it a real process:

- dmn cornerstone added with three decision tables:
  * assess-personal-data-risk  — PII regex signals -> risk level
  * gdpr-processing-route      — risk x centralisation -> CENTRAL/LOCAL,
                                  anonymisation, redaction level
  * human-validation-gate      — confidence thresholds + PII re-scan
                                  -> REJECTED/PENDING_REVIEW/APPROVED_AUTO
- BPMN expanded 3 -> 6 nodes (3 serviceTask + 3 businessRuleTask),
  with horizontal DI.
- Task ids, mappings, docs, manifest (dmn:true), uapf.yaml, lifecycle
  and eval-set updated; added a PII-bearing fixture.

Only the semantic extraction remains a model step. Risk classification,
GDPR routing and validation gating are now explicit ranked DMN rules —
inspectable, versioned, portable. Breaking change: structure + outputs.

processgit.mcp.yaml

@@ -3,16 +3,24 @@
 version: 1
 
 server:
-  name: "Semantic Document Analysis - UAPF reference algorithm"
-  description: "MCP server for the semantic document analysis process (UAPF package dev.uapf.semantic-document-analysis)."
+  name: "Semantic Document Analysis"
+  description: "MCP server for the semantic document analysis UAPF package (dev.uapf.semantic-document-analysis) - BPMN flow plus three DMN decision tables."
   instructions: |
-    This repository is a UAPF process package - the reference algorithm for
-    extracting VDVC-conformant semantic metadata from a document. Use
-    'search' and 'get_entity' to explore the BPMN flow, and 'validate' to
-    check the model. The process executes via UAPF-IP; see the /uapf-ip
-    endpoint of this repo.
+    This repository is a UAPF process package for semantic document
+    analysis. The algorithm lives in dmn/ as three decision tables; the
+    BPMN in bpmn/ wires them with three capability-backed service tasks.
+    Use 'search' and 'get_entity' to explore, 'validate' to check models.
 
 sources:
   - path: "bpmn/semantic-document-analysis.bpmn"
     type: "xml"
-    description: "BPMN - redact, extract, emit flow"
+    description: "BPMN - the six-node process flow"
+  - path: "dmn/assess-personal-data-risk.dmn"
+    type: "xml"
+    description: "DMN - PII signals to personal-data risk"
+  - path: "dmn/gdpr-processing-route.dmn"
+    type: "xml"
+    description: "DMN - risk to CENTRAL/LOCAL processing route"
+  - path: "dmn/human-validation-gate.dmn"
+    type: "xml"
+    description: "DMN - confidence thresholds to validation status"