Fix intake fact idempotence and bound preflight

[HelloThisWorld]

Summary

Fix repeated spec-intake discovery appending implementation-detail facts on every pass. The durable mission projection now records item-to-fact identities, and mission fact capacity is preflighted for the whole assessment before any record or event is written.

This prevents large intakes with several product-answer passes from reaching the 500-fact bound with duplicated facts, and prevents facts.jsonl from advancing beyond mission.json when a batch exceeds the bound. Claude Code and Codex plugin bundles and checksums are regenerated from the fixed sources.

Verification

• Intake and Mission suites: 147 tests passed
• Full suite: 2,843 tests passed in the sandbox; 27 process-spawn failures were isolated to sandbox permission errors
• All 14 affected test files rerun outside the sandbox: 133 tests passed
• TypeScript typecheck passed
• ESLint passed
• Public contract snapshots match
• Codex plugin validation passed
• Installed-bundle isolation verification: 15 checks passed
• New Codex CLI SHA-256: DB1ED5FB7EACF11662E1206E27B74004CB31F1DF88C4EE30B65CE092EB78E377

Checklist

• lint, typecheck, and test validation pass locally
• public-contract checks pass; no stable contract snapshot changed
• Documentation updated for the user-visible behavior change
• CHANGELOG entry added
• Everything is in English
• No employer or client proprietary content; fixtures are synthetic
• No credentials, tokens, or secret values in the diff or test output

Security impact: no authority boundary is expanded. The change strengthens bounded mission persistence by refusing over-capacity fact batches before writes.