feat: AQE embeddings by explicit consent #352

Why

ak pulls a model into Ollama and aliases it without separate consent (design: What this replaces).

In scope

Default unmanaged; the pull and the alias each need their own yes; projections per project; ak x aqe-embedding becomes an init choice.

Out of scope

Ollama itself.

Acceptance criteria

• Default init changes nothing in Ollama
• Each step asks separately

Dependencies

Blocked by: #335

Blocks: #386

Plan

• Release: 4.0.0-beta.2
• Size: size:M · Workstream: ws:project-scope
• Epic: feat: project-scope P4, Brain, agent-browser, embeddings and Superpowers (epic) #299
• Card: P4-03 in the card inventory
• Sources: Design (docs(plans): project-scoped management design and its prerequisites #289) What this replaces; Supersession ledger (docs(plans): v4 GA master plan, supersession ledger and v5 registers #290) ADR-0055

Verification

• node scripts/run-tests.mjs focus (new embedding tests)