test(ceo-mode-routing): submit a mode review that scrolled past the viewport

Run 36606688266 bundled routing, learnings and the mode choice into one
native call. Its review panel was taller than the terminal, so the tab
bar scrolled off, ceoModeSubmissionInput returned null for 240 s and HOLD
SCOPE was never submitted ('no posture match'). With no bar on screen the
viewport must still end at the focused Submit prompt, and the accumulated
screen text supplies the one complete panel, authenticated exactly as
before. Replay controls reject another mode, an unoffered answer, an
altered question, a quoted panel, trailing output, a moved cursor and an
answered or changed call.

test/skill-e2e-plan-ceo-mode-routing.test.ts

@@ -260,7 +260,7 @@ describeE2E('/plan-ceo-review mode routing (gate)', () => {
             }
             const currentInput = await session.currentScreen();
             capture('awaiting_posture', currentInput, transcript);
-            const modeSubmit = ceoModeSubmissionInput(currentInput, question.nativeCall, c.mode, transcript, submittedModePackets);
+            const modeSubmit = ceoModeSubmissionInput(currentInput, question.nativeCall, c.mode, transcript, submittedModePackets, session.visibleText());
             if (modeSubmit !== null) { session.send(modeSubmit); continue; }
             const pendingQuestion = readPendingQuestion(session.pendingQuestionFile, fixture.cwd,
               session.hermeticConfigDir, selectionStartedAt, transcript);