services/orchestrator: add crate READMEs

services/orchestrator/capabilities/README.md

diff --git a/services/orchestrator/capabilities/README.md b/services/orchestrator/capabilities/README.md
new file mode 100644
index 0000000..4241f07
--- /dev/null
+++ b/services/orchestrator/capabilities/README.md
@@ -0,0 +1,8 @@
+<!-- Licensed under the Apache-2.0 license -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
+# orchestrator-capabilities
+
+Device-facing capability traits for the Boot Orchestrator: `BootControl`
+(actuation — hold/release reset) and `BootMonitor` (observation — read boot
+liveness). A dependency-free leaf; adapters implement them elsewhere.

services/orchestrator/config/README.md

diff --git a/services/orchestrator/config/README.md b/services/orchestrator/config/README.md
new file mode 100644
index 0000000..fd4252a
--- /dev/null
+++ b/services/orchestrator/config/README.md
@@ -0,0 +1,8 @@
+<!-- Licensed under the Apache-2.0 license -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
+# orchestrator-config
+
+Schema for the per-board device table: `DeviceConfig`, `BootCheckpoint`,
+`BootSignal`, `CommitPolicy`, and a compile-time `validate`. Board tables in
+`target/<board>/devices.rs` supply the values.

services/orchestrator/hal-adapters/README.md

diff --git a/services/orchestrator/hal-adapters/README.md b/services/orchestrator/hal-adapters/README.md
new file mode 100644
index 0000000..51fbb03
--- /dev/null
+++ b/services/orchestrator/hal-adapters/README.md
@@ -0,0 +1,8 @@
+<!-- Licensed under the Apache-2.0 license -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
+# orchestrator-hal-adapters
+
+HAL-backed adapters for the capability traits: `HalBootControl` drives
+`BootControl` over a `ResetControl` line, `GpioBootMonitor` reads `BootMonitor`
+off a `GpioPort`. Kept separate so contracts never pull in the HAL.