Merge origin/main (v1.91.7.0) into test-audit-reduction

Keep both intents: v1.91.7.0's functional QA, docsync and exploratory
paid cases and their free owners stay; this branch's deletions stay
deleted. main's new paid keys follow the derived-closure touchfile rule
(free *.test.ts paths dropped, static helper/fixture closure added), its
new helper-only tests join the ratchet baseline, and its free selection
examples that named free test files now assert the derived selection.

Periodic CI keeps seven slices without the retired Autoplan slice; the
gate census keeps seven single-worker slices with --skip-judges. Wall
and census literals are recomputed from the merged planner, durations
are re-recorded on Ubicloud, and VERSION stays 1.91.8.0 above 1.91.7.0.

qa/sections/manifest.json

@@ -4,11 +4,41 @@
   "version": 1,
   "note": "PASSIVE registry (v2 plan T9 / CM2). Fields are IDs, file paths, human titles, and human-readable trigger text ONLY. The skeleton's decision-tree prose is the ONLY place that decides WHEN to read a section; required section reads are checked by test/carve-section-loading-qa.test.ts. No machine predicate here — see docs/designs/v2_PLAN.md:663.",
   "sections": [
+    {
+      "id": "scope",
+      "file": "scope.md",
+      "title": "Surface selection and safe probe authority",
+      "trigger": "setting up or probing a target, unless this invocation already established its surfaces and isolation"
+    },
+    {
+      "id": "browser-setup",
+      "file": "browser-setup.md",
+      "title": "Browser-only setup",
+      "trigger": "setting up an explicitly selected browser surface; never for functional-only targets"
+    },
+    {
+      "id": "exploratory",
+      "file": "exploratory.md",
+      "title": "Shared exploratory QA",
+      "trigger": "running the selected target's QA baseline and exploratory probes, with caller-owned authority"
+    },
+    {
+      "id": "system-functional",
+      "file": "system-functional.md",
+      "title": "Native functional contracts and evidence",
+      "trigger": "probing a selected API, CLI, job, worker or webhook surface with repository-supported tools"
+    },
+    {
+      "id": "browser-verify",
+      "file": "browser-verify.md",
+      "title": "Browser-only repair verification",
+      "trigger": "rechecking a reproduced browser defect after repair; never for a functional-only repair"
+    },
     {
       "id": "test-bootstrap",
       "file": "test-bootstrap.md",
       "title": "Test Framework Bootstrap",
-      "trigger": "checking the project's test framework during Setup — ecosystem-marker detection, the bootstrap offer, framework install, CI pipeline generation, and first real tests (also needed at Phase 8e.5 if you skipped it and a regression test now requires a framework)"
+      "trigger": "checking the browser target's test framework during Setup; never for functional-only targets — ecosystem detection, authorized bootstrap, CI pipeline and first tests"
     },
     {
       "id": "qa-patterns",