Merge origin/main (v1.91.9.0, #2998) into capy/audit-fix-wave; release as v1.91.10.0

Main shipped v1.91.9.0, so this wave becomes v1.91.10.0. Conflicts kept this
branch's planner-derived assertions. Main's new test-value eval gets rule
kinds for its three gate cases and its measured 332 s duration from #2998's
CI; census counts and the PR fallback floor follow the new file. The packing
test now weighs each tier's recorded durations the way the planner does.

test/cookie-validation-phases.test.ts

@@ -44,10 +44,10 @@ test('the existing quality and behavior phases retain their complete separate sh
   expect(quality.evalsAll).toBe(true);
   expect(behavior.evalsAll).toBe(true);
   expect(qualityFiles).toHaveLength(1);
-  // 44 files (first-task-scaffold registers no gate case, so the gate lane
+  // 45 files (first-task-scaffold registers no gate case, so the gate lane
   // skips it); the seven case-sharded files contribute one shard per gate case.
-  expect(new Set(behaviorFiles.map(file => file.split('#')[0])).size).toBe(44);
-  expect(behaviorFiles).toHaveLength(77);
+  expect(new Set(behaviorFiles.map(file => file.split('#')[0])).size).toBe(45);
+  expect(behaviorFiles).toHaveLength(78);
   expect(behaviorFiles).toEqual(expect.arrayContaining([
     ...['review-exploratory-small-cli', 'ship-exploratory-small-cli', 'ship-exploratory-unavailable',
       'ship-exploratory-plan-checks', 'ship-exploratory-late-input'].map(id => `test/skill-e2e-qa-callers.test.ts#${id}`),