openup: architecture notebook + EA diagram renders

- analysis-design/architecture-notebook.md: Architecture Notebook work
  product in the keyfob docx template structure (10 sections), grounded
  in mapping / design note / supplementary specs; embeds the component
  model and all 12 realization figures
- scripts/openup/export-diagram-images.ps1: read-only EA COM renderer
  (EA-15 findings: image API on ProjectInterface, OpenDiagram before
  export or blank stub, type 0 = PNG); renders reflect manual layouts
- renders: requirements/use-case-overview.png, analysis-design/
  uc-01..12-realization.png + component-architecture.png; embedded as
  figures in use-case-model.md and uc-realization-mapping.md
- BUILD-CHECKLIST 6.4 documents the exporter

docs/openup/analysis-design/uc-realization-mapping.md

@@ -144,6 +144,10 @@ sb-api → {sb-core, sb-shared, sb-db, sb-auth, sb-common}; sb-core → {sb-shar
 sb-db → sb-shared; sb-auth → sb-shared. The dependency rule: inward toward
 sb-core/sb-shared (domain); adapters (sb-api/sb-db/sb-auth) and the client at the edge.
 
+![Component Architecture](component-architecture.png)
+
+*Figure: joint component architecture (rendered from the EA model via `scripts/openup/export-diagram-images.ps1`). Per-UC realization figures: `uc-01-realization.png` … `uc-12-realization.png` in this folder; they are embedded in the Architecture Notebook (§9.2).*
+
 ## 4. Research summary — keyfob-station EA pipeline (reference)
 
 Source: read-only clone `http://192.168.1.10:3000/jan/keyfob-station.git` (inspected 2026-10-03; no modifications).