fix: red-team review fixes

Five informational findings: TODOS shard-census arithmetic corrected (census
is 67 with one free ungated slot; the SECOND ungated file trips the floor)
and version pointer fixed (v0.18.2.0, not v0.18.1.0); the free tripwire now
pins the two dispatch-matcher marker strings so a pr-body prompt reword
fails the free suite instead of surfacing as a paid-tier mystery; the E2E
matcher gains a section-paste exclusion (scaffold strings disqualify) —
verified against all recorded runs; the E2E header documents the tierless
test:evals invisibility tradeoff.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

test/ship-document-release-dispatch.test.ts

@@ -59,6 +59,12 @@ describe('/ship Step 18 dispatches /document-release (carve visibility)', () =>
       expect(content).toContain('"documentation_section"');
       // Deliberate design: docs sync never holds a ship hostage.
       expect(content).toContain('Do not block /ship on subagent failure');
+      // These two strings are the ship-docsync E2E's dispatch-matcher markers
+      // (test/skill-e2e-ship-docsync.test.ts) — they come verbatim from the
+      // dictated Step 18 subagent prompt. Rewording them in pr-body.md.tmpl
+      // silently decouples the paid matcher; update both in lockstep.
+      expect(content).toContain('You are executing the /document-release workflow');
+      expect(content).toContain('.claude/skills/gstack/document-release/SKILL.md');
     }
   });