fix(scaffold): new projects were missing two documents they reference

docs/data/README.md links to `img/README.md` for the dimensions, weights and
magic-byte rule of the three marks. scaffold.sh never copied it: DOCS did not
list it and DIRS created docs/data/img empty. Every scaffolded project therefore
started with a broken link in a required document, a doc-claims failure on its
first run, and no copy of the spec the link promises.

The omission looks like a misreading of the script's own rule. Its header says
it does not copy branding and that the template's docs/data/img is not a source
-- both true of the three .webp marks, which must not be invented because a
placeholder that looks deliberate outlives the issue that would have replaced
it. img/README.md is documentation about those files, not one of them.

Verifying that fix surfaced a second, plainer one: docs/architecture/GUARDS.md
was never scaffolded either, while being referenced by TOOLS.md,
DOC_TRUST_MAP.md and architecture/README.md twice. It is a document, not a
script, and nothing argued for leaving it out.

A scaffold now writes 19 files, and a freshly scaffolded project no longer names
a document that is not there.

This is the fourth instance here of one shape -- a document naming a path that
is not present. The others were docs/planning/FUTURE.md in the batch ledger, an
Exempt: line inside a code fence, and docs/data/logo.webp as an example of where
NOT to put an asset. The first three were wrong in the template; this one was
correct in the template and wrong in every copy of it, which is why running
doc-claims here never caught it and scaffolding into a scratch directory did.

closes #15

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

docs/architecture/scripts/scaffold.sh

@@ -117,8 +117,15 @@ DOCS=(
   docs/security/SECURITY.md
   docs/security/SECURITY_CHECKLIST.md
   docs/architecture/README.md
+  docs/architecture/GUARDS.md
   docs/design/README.md
   docs/data/README.md
+  # The spec for the three marks, not one of the marks. `docs/data/README.md`
+  # links to it, so leaving it behind gave every scaffolded project a broken
+  # link and a doc-claims failure on its first run -- the rule above about not
+  # copying branding is about the .webp files, which genuinely must not be
+  # invented, and this is documentation about them.
+  docs/data/img/README.md
 )
 
 # Directories made empty, holding nothing this script is willing to invent.