QA hardening: honest docs, CLI/MCP fixes, store locks

[telivity-otaip]

Summary

• Qualify the public promise (briefing/MCP + fresh only); regenerate real CLI screenshot; label host UI shots as MOCK; document npm link / npm exec and wallclock mcp-config --print.
• Fix effort log multi-word names (duration = last token); slug-normalize effort names so Auth Rewrite ≡ auth-rewrite.
• Add briefing Generated-at / 15m stale guidance; adapters require refresh if stale; open-session age warning; align status/timeline totals with briefing.
• MCP writes default OFF (AGENT_WALLCLOCK_WRITES=1); shared parseDuration in core; real MCP stdio protocol smoke; store dir 0700 / file 0600 + best-effort lock; friendlier corrupt-store errors; dedupe CI mcp-smoke.

Test plan

• npm test (13 passing)
• npm run smoke (CLI + MCP import + MCP stdio protocol)
• CI green on this PR
• Spot-check wallclock mcp-config --print cursor emits absolute server.js
• Spot-check effort start "Auth Rewrite" then effort start auth-rewrite reuses one effort
• Spot-check MCP start_effort fails without AGENT_WALLCLOCK_WRITES=1

Made with Cursor