fix(review-r3): engine hardening + crash-resume seams

[leeovery]

Summary

• Round-3 system-wide review fixes (6 agent slices: epic journey, adversarial CLI, state-machine, quickfix/bugfix journeys, crash/resume, corpus-wide reference sweep), stacked on the round-2 fix PR.
• Engine: empty-path-segment refusal in parsePath (empty dotpath aliased the project manifest under the work-unit lock), empty work-unit guard on commit, work-type-mismatch refusal on workunit create reuse, order-independent non-live filtering in phaseStatus, all-attempted-phases-cancelled topics now render as cancelled (was fresh with a dead-end next action), cancel/reactivate round-trips the map item's order, promoted items are terminal for start/complete/supersede, review resume-gate counts distinct reviewed ids.
• Prose crash-resume seams sealed: task-loop reconciliation, verifier-push dedupe, actions-loop in-flight staging resume, author-tasks re-author guard (prevents duplicate external tasks), analysis-loop unsynthesised-cycle resume, spec-extraction re-read before logging, pivot-to-epic parameter declaration.
• Test pins updated to the new lifecycle/order semantics + new pins for the dedupe and cancel/reactivate behaviour.

Test plan

• npm test — 1571 pass
• npm run test:cli, npm run test:migrations, npm run typecheck — green

🤖 Generated with Claude Code

Stack

1. feat(engine): discovery-map add-batch — the harvest persists in one call (D7) #505
2. feat(engine): manifest apply — batched set/delete across one work unit (D7) #506
3. refactor(prose): task-map family folds onto existing batch forms (D7, stage 3) #507
4. feat(engine): manifest set — two grammars, never mixed #508
5. refactor(prose): dump/read folds — subtree gets replace per-topic loops (D7, stage 5) #509
6. feat(engine): commit --plan — plan storage stages from recorded state (D7, stage 6) #510
7. fix: batching-stack review round — re-resolve rewired, guards symmetric, hardening pinned #512
8. fix: deep-dive round 2 — backbone rule flipped, pre-upgrade paths routed, flow bugs closed #513
9. fix(review-r3): engine hardening + crash-resume seams #514 👈 current
10. feat(scoping): promotion routes through first-phase choice + bridge #515
11. fix(spec): pin the bugfix source name to the topic #516
12. fix(skills): gate-skip sentence accurate in gate-less phases #517
13. fix(review-entry): name the real upstream — specification and plan #518
14. fix(shared): strip triage-landing's unreachable superseded-research arm #519
15. feat(engine): refuse work-unit-level fields that shadow the phases tree #520
16. fix(discovery): first-written briefs join the full brief lifecycle #521
17. test(sim): pipeline simulation — engine driven end-to-end as a black box #522
18. fix(round-4): review findings — backfill keying, ratchet evasion, pull guard #523