[security][major] XSS partial sanitization — inner text leaks into chronicle as a player action

[100yenadmin]

Source: v1.0.4-rc1 RRI @fa97b34 (newbie/veteran/adversarial/narrative). Evidence: vm2-*/bugs.ndjson.

The player-visible Chronicle leaks internal engine scaffolding + metadata that should never reach the player:

• internal kind labels visible: "narration", "dialogue", "began narration";
• engine scaffolding notes + full-scene duplication rendered in the log;
• player actions prefixed "You—" (formatting artifact looks like DM narration).

The chronicle should render clean 2nd-person prose only. (NOTE: the opening-narration duplication is a separate bug already fixed by #720/#727 — post-fa97b34, pending re-measure.) Group: chronicle hygiene. Sprint 1/2.

[100yenadmin]

Fixed by PR #740 (chronicle hygiene — strips <script> payload BODIES + escapes player-move text). Adversarially verified RED→GREEN. Product-confirm at the next v1.0.4 RRI sweep.