Sync GRU governance submodule updates

config/gru-governance-supervision-profile.json

@@ -4,7 +4,7 @@
   "profileId": "gru-jurisdictional-storage-governance-supervision",
   "version": "1.0.0",
   "updated": "2026-03-31",
-  "notes": "Machine-readable policy profile for asset storage namespaces, jurisdiction-aware governance review, supervision metadata, and upgrade notice periods across c*, cW*, GRU base components, and tokenized assets.",
+  "notes": "Machine-readable policy profile for asset storage namespaces, governance-controller-only metadata execution, emergency/manual admin overrides, asset-scoped jurisdiction review, supervision metadata, and upgrade notice periods across c*, cW*, GRU base components, and tokenized assets.",
   "references": {
     "standardsProfile": "config/gru-standards-profile.json",
     "storageGovernanceDoc": "docs/04-configuration/GRU_STORAGE_GOVERNANCE_AND_SUPERVISION_STANDARD.md",
@@ -37,7 +37,8 @@
       "GOVERNANCE_ROLE",
       "JURISDICTION_ADMIN_ROLE",
       "REGULATOR_ROLE",
-      "SUPERVISOR_ROLE"
+      "SUPERVISOR_ROLE",
+      "EMERGENCY_ADMIN_ROLE"
     ],
     "registryRoles": [
       "DEFAULT_ADMIN_ROLE",
@@ -47,14 +48,17 @@
       "UPGRADER_ROLE",
       "JURISDICTION_MANAGER_ROLE",
       "REGULATOR_ROLE",
-      "SUPERVISOR_ROLE"
+      "SUPERVISOR_ROLE",
+      "EMERGENCY_ADMIN_ROLE"
     ],
     "governanceRoles": [
       "DEFAULT_ADMIN_ROLE",
       "PROPOSER_ROLE",
       "EXECUTOR_ROLE",
       "CANCELLER_ROLE",
-      "UPGRADER_ROLE",
+      "UPGRADER_ROLE"
+    ],
+    "deprecatedGovernanceRoles": [
       "JURISDICTION_TAGGER_ROLE"
     ]
   },
@@ -75,16 +79,27 @@
     ]
   },
   "proposalPolicy": {
-    "jurisdictionTagRequiredForUpgradeSensitiveChanges": true,
+    "assetScopeRequiredForUpgradeSensitiveChanges": true,
+    "jurisdictionDerivedFromRegistryAssetState": true,
     "queueRequiresJurisdictionApprovalWhenFlagged": true,
     "defaultMinimumUpgradeNoticePeriodSeconds": 604800,
     "approvalSource": "UniversalAssetRegistry.jurisdictionAuthorities",
+    "proposalEntryPoint": "GovernanceController.proposeForAsset",
+    "metadataExecutionSurface": "GovernanceController.execute -> token/registry governanceController-only setters",
+    "manualJurisdictionTaggingAllowed": false,
     "minimumReviewData": [
       "jurisdictionId",
       "reviewRequired",
       "minimumNoticePeriod"
     ]
   },
+  "emergencyPolicy": {
+    "manualAdminPathsRemainAvailable": true,
+    "authorizedRoles": [
+      "EMERGENCY_ADMIN_ROLE"
+    ],
+    "intendedUse": "Emergency remediation, regulator-directed manual intervention, and bootstrap configuration before governance is fully wired."
+  },
   "jurisdictionDefaults": {
     "supervisionRequiredDefault": true,
     "governmentApprovalRequiredDefault": false,