W7 T9 T7: archaeology lint on generated skill text; drop issue numbers from runtime prose

test/archaeology-lint.test.ts renders every host, scans each generated
SKILL.md and section for issue/PR numbers and incident stories, maps each hit
to the template or resolver that emitted it, and fails with that source, the
matched text and the allowlist entry shape to paste (reason required). Entries
are keyed by skill plus a nearby anchor; a stale entry fails.

Removed the IDs from runtime prose in codex, context-restore, scrape,
skillify, setup-gbrain, sync-gbrain, the model_unusable resolver line and the
tasks aggregator comment; every rule stays. Upstream bug IDs, usage examples
and sample output are allowlisted. Hits in files other workstreams own
(design-doc-discovery.ts, codex consult-mode) carry PENDING entries.
Generated SKILL.md files and goldens are regenerated by the integrator.

scripts/resolvers/constants.ts

@@ -165,7 +165,7 @@ Branch on the echoed \`CODEX_MODE\`:
 - **\`under_codex\`** — stale artifact selected its own harness. Print: "Codex outside review unavailable: harness mismatch; no outside process started. Missing coverage. Repair: setup --host codex." Skip the outside invocation and follow the workflow's native-review instructions below. Conflicting inherited harness markers are not grounds to guess another provider.
 - **\`not_authed\`** — installed but no credentials. Print: "Codex not authenticated; outside coverage unavailable. Run \`codex login\` or set \`$CODEX_API_KEY\`." ${nativeRoute}
 - **\`broken_install\`** — the CLI is on PATH but cannot execute (spawn ENOENT, non-executable binary, missing vendor payload). Print: "Codex is installed but its binary cannot run — Codex passes skipped. Reinstall: \`npm install -g @openai/codex\`." Relay the probe's HINT lines. ${nativeRoute}
-- **\`model_unusable\`** — the selected model (see \`CODEX_MODEL:\`) is invalid or unavailable to the account (#2477: HTTP 400 on every call). Relay the probe's HINT lines and the fix (\`GSTACK_CODEX_MODEL=<supported-model>\` or config.toml \`model\`); never substitute a model. ${nativeRoute} The ~10s round trip is cached for 1h; timeouts fail open to \`ready\`.
+- **\`model_unusable\`** — the selected model (see \`CODEX_MODEL:\`) is invalid or unavailable to the account (HTTP 400 on every call). Relay the probe's HINT lines and the fix (\`GSTACK_CODEX_MODEL=<supported-model>\` or config.toml \`model\`); never substitute a model. ${nativeRoute} The ~10s round trip is cached for 1h; timeouts fail open to \`ready\`.
 - **\`ready\`** — run the Codex pass below.`;
 }
 

scripts/resolvers/tasks-section.ts

@@ -133,7 +133,7 @@ if command -v jq >/dev/null 2>&1; then
       # .commit must be bound BEFORE piping to the split commit array: a
       # pipe rebinds jq's context, so a bare .commit after it indexes the
       # ARRAY with a string, every line errors into 2>/dev/null, and the
-      # aggregate is empty forever — the #2018 zero-tasks bug.
+      # aggregate is empty forever.
       jq -c --arg branch "$BRANCH" --arg commits "$COMMITS_RECENT" \\
         '.commit as $c | select(.branch == $branch and ($commits | split("|") | index($c) != null))' \\
         "$f" 2>/dev/null >> "$ALL_JSONL" || true