fix(tools): identity audit exemptions + import hierarchy (#69 #70)

#69: audit-theme-design tags hue/CVD/ANSI-family noise on white,
vantablack, lumon, hackerman, matte-black, miasma as [identity] with a
legend — do not retune identity palettes into traffic lights.

#70: import-palettes keeps surface≠overlay when color0==color8, derives
light UI chips from base (ANSI-black trap), gentler light mantle; roles
are first-class. No bulk re-import of shipped theme JSON.

Verified: V0 (py_compile + synthetic import fixtures + audit report).

docs/ROADMAP.md

@@ -877,6 +877,13 @@ Design/decision records and a running log of shipped work (items marked
   cover all three generated surfaces. Status glyph accents
   (good/warn/bad on base, 2.0–2.7 in some palettes) were left as-is —
   raising them is palette design, a human call.
+- ✓ **Identity audit exemptions + import hierarchy** (#69/#70):
+  `tools/audit-theme-design.py` tags expected hue/CVD/ANSI-family noise
+  on white/vantablack/lumon/hackerman/matte-black/miasma as `[identity]`
+  (do not retune into traffic lights). `tools/import-palettes.py` keeps
+  surface≠overlay when ANSI color0==color8, derives light chips from base
+  instead of ANSI black, and documents that roles are first-class — no
+  bulk re-import of shipped themes without a hierarchy pass.
 - ✓ **Waybar crash on theme switch left the session bar-less** (Latitude
   hardware QA, 2026-07-04): exec-once has no supervisor, so any crash
   orphaned the session until relogin — and the switch path itself was