Add hyperlink-vs-button rule; register new contracts in router

- controls-selection: forbid hyperlinks for opening modals/elements
  unless explicitly requested; buttons required instead.
- AGENT-BOOTSTRAP: add router entries for hardware-ingest-json and
  submodule-integration contracts (lint was failing without them).

AGENT-BOOTSTRAP.md

@@ -41,6 +41,8 @@ Read additional contracts by task type:
   `go-api`, `go-background-tasks`, `go-logging`
 - DB queries, migrations, backups, startup DB safety:
   `go-database`, `backup-management`
+- Hardware inventory ingest, Redfish/CMDB import payloads:
+  `hardware-ingest-json`
 - Local-first desktop migration/recovery:
   `local-first-recovery`
 - Tables, bulk actions, filters, pagination:
@@ -65,6 +67,8 @@ Read additional contracts by task type:
   `secret-management`
 - Project architecture documentation rules:
   `go-project-bible`
+- Git submodules, shared library/vendored dependency integration:
+  `submodule-integration`
 
 ## Default Rule