Final pre-acceptance design-integrity sweep

[referencefield]

Pre-acceptance design-integrity repairs found by a repository-wide sweep. This remains development work and does not start the acceptance gate.

Key repairs:

• align Codex bootloader with the current release lifecycle
• normalize project-scoped working-style routing
• tighten prospective-user wording around actual GitHub write capability
• correct acceptance corrective re-entry so one authorized gate does not create repeated approval loops
• make the zero-reading gate prove the minimum public plan/surface claim rather than a privileged maintainer environment
• add behavioral coverage for release lifecycle and repository-backed closeout
• make closeout/health/update controls explicitly invokable with @github
• require the first release transition to replace pre-first-release lifecycle assumptions with a post-release lifecycle before tagging
• align bug-report lifecycle metadata and deterministic lifecycle validation

The core memory topology, authority hierarchy, selective retrieval, persistence routing, write-set model, repository-ID identity model, linked-repository authority, and companion precedence are intentionally unchanged.

protocol_version remains unreleased and protocol_status remains development.