Layout shift toward dappco.re/<lang>/api/<feature> ↔ core/api/<lang>/<feature>.
The Go module root moves from repo root into go/, giving the api repo a clean
top level: composer.json + sdk-config/ at root, go/ for Go, php/ for PHP, with
ts/ + py/ following the same shape as those land.

Module path stays dappco.re/go/api — consumers do not need source changes.
They go get @v0.11.0 + tidy and continue importing dappco.re/go/api as before.

Moved into go/:
- go.mod, go.sum
- 154 .go files (production + tests)
- cmd/ (api-cli + gateway binaries)
- pkg/ (provider, stream)
- tests/cli/ (Go CLI tests)

Stays at repo root (cross-language):
- composer.json + composer.lock (PHP package manifest)
- README.md, CLAUDE.md, AGENTS.md, LICENCE
- docs/ (engine docs — symlinked from go/ for audit visibility)
- sdk-config/ (multi-language SDK gen configs)
- scripts/ (cross-lang build helpers)
- .woodpecker.yml, sonar-project.properties

Updates:
- .woodpecker.yml: golangci-lint + go test commands now `cd go && ...`
- sonar-project.properties: sonar.go.coverage.reportPaths=go/coverage.out
- go/{README,CLAUDE,AGENTS}.md + go/docs/ symlinked to ../* (single source of truth)

Verification:
- go mod tidy clean from go/ as new module root
- go vet ./... clean
- go test -count=1 ./... pass for api root + cmd/gateway + pkg/provider + pkg/stream
- audit COMPLIANT (all 26 dimensions)