feat(runtime): align host and doctor truth

[beefiker]

Summary

• replace private orchestration examples with host-native delegation guidance and exact Codex/Claude role identities
• update Claude plugin maintenance and platform-specific cleanup guidance across all five README locales
• enforce physical reviewability accounting for unterminated, CR/LF/CRLF, module-script, and YAML variants
• add explicit doctor --scope source|installed selection with strict argument validation
• bump all release surfaces to 0.12.3

Why

The downloaded runtime-truth ledger contained a small set of useful fixes, but also included stale and inactive sidecars. This PR applies only the four current-main slices that improve runtime truth without importing unrelated provenance, evaluator, registry, filesystem, wrapper, or Windows-native machinery.

A deep pre-PR review also found and fixed two minor gaps: the standalone audit test now reuses the production reviewability helpers, and doctor’s dispatch-coherence comment now describes the host-owned role model accurately.

Impact

Codex and Claude callbacks now use exact host-specific identities, doctor can distinguish source health from installed health, documentation matches the current Claude plugin update flow, and reviewability checks no longer undercount physical lines or omit .mjs, .cjs, and .yml files.

Validation

• npm test — 664 passed, 0 failed
• node --test test/audit.test.js test/doctor.test.js — 30 passed, 0 failed
• node src/cli.js doctor --scope source --json — ok: true
• isolated doctor --scope installed --root . --json — ok: true
• node scripts/sync-version.mjs — 0 updates; all manifests already 0.12.3
• npm pack --dry-run --json --ignore-scripts — superloopy@0.12.3, 507 files
• git diff --check
• independent post-fix review — no Critical, Important, or Minor findings