fix(design): Aside dump script stays single-quoted; redaction gate sized to the dump cap; doctrine made consistent

- The DOM-dump Aside block was the only double-quoted `aside repl` script in
  the tree (to splice the function text), which put the agent-filled <url>
  inside a double-quoted bash string: a same-origin href carrying $(...) would
  run in the reviewer's shell when Phase 3 opened that page. The script is
  single-quoted like every other Aside script and the function text enters
  through a closed-quote segment ('"$_DUMP"'); the fallback line is
  `$B js '('"$_DUMP"')()'`. A free test pins that no rendered Aside script
  opens with a double quote.
- The persist block capped dumps at 10 MiB but ran gstack-redact with its
  1 MiB default, so every real page between the two was deleted as
  DOM_DUMP_REDACTION_BLOCKED; the gate passes --max-bytes at the dump cap and
  blocks on any exit other than clean (0) or MEDIUM (2), so a redaction tool
  that fails to run can no longer fall through to "persist".
- Dump hygiene removes <template> and <noscript> subtrees (invisible to the
  attribute walk), inline on* handlers, and the cross-origin <link> nodes
  already named in the note, so the file handed to the engine references no
  remote stylesheet.
- Doctrine: the Codex design-voice prompts said "2-3 intentional motions"
  against the one-authored-moment rule; the overused-display heading scoped
  its ban to Persuade/Experience while the catalog and hard rules ban it
  everywhere; design-consultation's Important Rule 4 still said "as primary";
  design-html's blacklist header is now "Never include by default" with the
  mockup/DESIGN.md/user-ask override the catalog grants; the slop gate honors
  Decisions Log and Do's and Don'ts blessings like /review does; the landing
  "poster" line says poster in stance, not type size; the design binary's
  variant dials no longer flip light/dark for variety; gstack's DESIGN.md
  rows name data labels (UI labels stay the DM Sans token) and call the
  skill-bar fill and hovers functional transitions.
- design-review names how the base branch is found (gh pr view, then the
  repo default; never main) for the source-mode scan and the diff-aware mode.
- frontend-scope matches the config globs at the repo root only, like the
  bash arm; the parity test carries nested samples.
- Cleanups: renderCatalog's stale style option, an unused import, the
  identity-map bannedFontNames, the checklist header's "same entries" claim,
  the catalog header's consumer list, the orphaned main() docstring, the
  plan doc's IIFE bullet. design-html's skeleton ceiling is re-measured
  (54,184) for the two doctrine sentences.

Tests: AUTO-FIX rendering from the catalog, the E2E slice markers checked in
the free suite, the hygiene cases for templates/noscript/handlers/remote
links, and the review E2E counting detector rows separately from the seven
checklist plants.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

test/dom-dump-hygiene.test.ts

@@ -9,7 +9,8 @@
  * existing <style> nodes), <meta content> emptied (viewport kept), query
  * strings cut from every URL attribute, script bodies emptied, linked
  * stylesheets inlined with author hex restored, cross-origin sheets named in
- * the trailing note, inlined <link> nodes removed.
+ * the trailing note and removed from the markup, inlined <link> nodes removed,
+ * <template> and <noscript> subtrees dropped, inline on* handlers dropped.
  */
 import { describe, test, expect } from 'bun:test';
 import * as fs from 'fs';
@@ -48,7 +49,8 @@ describe.skipIf(!BROWSE || !POSIX || !OPTED_IN)('lib/dom-dump.js in a real DOM (
 <input value="SECRET INPUT"><textarea>SECRET TEXT</textarea>
 <a href="/page?token=SECRET">link</a>
 <img src="/img.png?sig=SECRETSIG" srcset="/a.png?s=SECRETSET 1x, /b.png?s=SECRETSET2 2x">
-<form action="/submit?csrf=SECRETCSRF"><button formaction="/alt?f=SECRETFORM">go</button></form>
+<form action="/submit?csrf=SECRETCSRF"><button formaction="/alt?f=SECRETFORM" onclick="track('SECRETHANDLER')">go</button></form>
+<template><input value="SECRET TEMPLATE"><a href="/t?x=SECRETTPL">t</a></template><noscript><img src="/px.gif?id=SECRETNOSCRIPT"></noscript>
 <style>.inline { background: url("${big}") }</style>
 <div data-long="${'L'.repeat(40)}" data-short="ok" title="${big}">x</div>
 <img src="${big}">
@@ -79,7 +81,7 @@ describe.skipIf(!BROWSE || !POSIX || !OPTED_IN)('lib/dom-dump.js in a real DOM (
       expect(html).toContain(`<style ${DOM_DUMP_STYLE_ATTR}=""`);
       expect(html).toContain('#6366f1');
       expect(html).not.toMatch(/<link[^>]*href="styles\.css"/);
-      expect(html).toMatch(/<link[^>]*cross-origin\.css/);
+      expect(html).not.toMatch(/<link[^>]*cross-origin\.css/); // named in the note, removed from the markup: the engine never sees a remote stylesheet
       expect(html).toContain(`<!-- ${DOM_DUMP_NOTE_PREFIX} `);
       expect(html).toContain('cross-origin stylesheets not resolved');
       expect(html).toContain('scripts stripped: 1');
@@ -94,6 +96,12 @@ describe.skipIf(!BROWSE || !POSIX || !OPTED_IN)('lib/dom-dump.js in a real DOM (
       expect(html).not.toContain('SECRETSET');
       expect(html).not.toContain('SECRETCSRF');
       expect(html).not.toContain('SECRETFORM');
+      expect(html).not.toContain('SECRETHANDLER');
+      expect(html).not.toMatch(/ onclick=/);
+      expect(html).not.toContain('SECRET TEMPLATE');
+      expect(html).not.toContain('SECRETTPL');
+      expect(html).not.toContain('SECRETNOSCRIPT');
+      expect(html).not.toMatch(/<template|<noscript/);
       expect(html).toContain('srcset="/a.png 1x, /b.png 2x"');
       expect(html).not.toContain('L'.repeat(40));
       expect(html).toContain('data-short="ok"');
@@ -105,5 +113,5 @@ describe.skipIf(!BROWSE || !POSIX || !OPTED_IN)('lib/dom-dump.js in a real DOM (
       fs.rmSync(site, { recursive: true, force: true });
       fs.rmSync(tmp, { recursive: true, force: true });
     }
-  }, 120_000);
+  }, 180_000);
 });