Add Email Routing rule surface

[rogu3bear]

Summary

• add a first-class email.routing_rule cfctl surface for zone Email Routing rules
• support list/get/verify and plan/ack-safe upsert from literal recipient to Email Worker
• update generated capabilities docs

Verification

• jq empty catalog/surfaces.json
• bash -n scripts/cf_inventory_email_routing_rules.sh scripts/cf_mutate_email_routing_rule.sh scripts/lib/cfctl.sh commands/cfctl.sh
• ./scripts/verify_static_contract.sh -> static-contract verification passed
• CF_TOKEN_LANE=global ./cfctl list email.routing_rule --zone adapteros.com --name founders@adapteros.com -> existing rule read successfully
• CF_TOKEN_LANE=global ./cfctl apply email.routing_rule upsert --zone adapteros.com --name founders@adapteros.com --service star-maildesk-cf-router --plan -> preview produced a PUT plan, no live mutation performed

Notes

This intentionally stops at a previewed Email Routing rule mutation. Do not ack live maildesk routing until the maildesk router forwards/notifies operators or the desk UI is ready to be the primary mailbox surface.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (7 files)

• catalog/surfaces.json
• commands/cfctl.sh
• docs/capabilities.md
• scripts/cf_inventory_email_routing_rules.sh
• scripts/cf_mutate_email_routing_rule.sh
• scripts/lib/cfctl.sh

---

_{Reviewed by grok-code-fast-1:optimized:free · 97,776 tokens}