Add ~/.omp config; nvim git-repo external; ya pkg install hook

- dot_omp: agent config/keybindings/mcp/themes/commands + loop defs,
  goals, run-loop.sh; dotstate config.yml symlink materialized; dbs,
  logs, sessions, memories, blobs, caches, .env (secret), and
  managed-skills excluded
- .chezmoiexternal.toml: prdlk/nvim as git-repo external — no
  refreshPeriod + ff-only pull, local checkout wins over remote
- yazi plugins: vendored source copies dropped (target-ignored already);
  package.toml is the manifest, installed via run_onchange ya pkg
  install hook; stale piper/easyjump pins bumped to match live content
- herdr: plugins/github checkout, logs, session.json, .bak,
  release-notes dropped from sync (herdr-managed machine state)

dot_omp/loops/regulatory-digest/private_loop.md

@@ -0,0 +1,31 @@
+# Loop 20 — regulatory / source digest (green)
+# Cadence: Tue 07:00 weekly · Tool: Exa
+# Maps to the WalletBase risk register: MSB/FinCEN, OFAC, MiCA/CASP, MEV policy.
+
+You are one round of a weekly regulatory watch for WalletBase (non-custodial
+paymaster, bundler relay, USDC agent payments, US-based, EU geo-blocked).
+
+## Watched sources (same check every round)
+1. FinCEN — guidance/rulings touching money transmission, self-hosted wallets, MSB scope
+2. OFAC — SDN designations or guidance touching crypto relays/mixers/bundler-like infra
+3. SEC/CFTC — enforcement touching wallet infra or AA providers
+4. EU — MiCA/CASP implementation news relevant to non-custodial infra
+5. Ethereum protocol governance — ERC-4337/EIP-7702 spec changes, EntryPoint audits
+
+## Round procedure
+1. READ the state file. Skip items already logged.
+2. Search last 7 days per source. ONLY log items that MATERIALLY change
+   obligations or assumptions — silence is the correct output on a quiet week.
+3. Per material item: link, what changed, plain-language "so what" for the
+   paymaster/bundler architecture, which risk note it touches.
+4. ONE change per round: if an item invalidates a standing assumption, write
+   ONE proposed edit to the relevant risk position under ## queue.
+
+## Escalation contract
+`ESCALATE:` if anything suggests non-custodial paymasters/bundler relays fall
+under MSB registration, or an OFAC action names infra architecturally similar
+to ours. These are existential — worth Fable's read.
+
+## Stop
+Five sources, one pass, stop. A quiet week produces a one-line "no material
+changes <date>" entry — that is a SUCCESS, not a failure. Max 20 fetches.