Add frontend static boundary guard

[potter-sun]

Summary

• Add a frontend static boundary guard for Aevatar Console Web.
• Block frontend calls to actor-state/replay/projection-refresh endpoints.
• Block actorId prefix parsing and direct dependency on internal EventEnvelope routing fields.
• Wire the new guard into tools/ci/architecture_guards.sh and document it in tools/ci/README.md.

Closes #606

Validation

• bash tools/ci/frontend_static_boundary_guard.sh
• git diff --cached --check

Notes

• Full bash tools/ci/architecture_guards.sh was not completed locally because this machine is missing the existing buf dependency required by proto_lint_guard.sh.
• Issue Add frontend static boundary guard for console architecture rules #606 has milestone 2026-05-11 and assignee potter-sun. Adding it to the requested aevatarAI organization project is blocked locally because the current GitHub token lacks the project scope.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.01%. Comparing base (36f96f7) to head (9016f8d).

@@            Coverage Diff             @@
##              dev     #607      +/-   ##
==========================================
- Coverage   72.01%   72.01%   -0.01%     
==========================================
  Files        1255     1255              
  Lines       90723    90723              
  Branches    11877    11877              
==========================================
- Hits        65338    65334       -4     
- Misses      20703    20706       +3     
- Partials     4682     4683       +1     

Flag	Coverage Δ
ci	72.01% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 2 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.