release: OpenCodeHighEnd v0.1.13 upstream sync and audit fixes

[kuker24]

Summary

Release OpenCodeHighEnd v0.1.13 with 6 discrete sync scopes (A–F) and complete resolution of 17 audit items.

Key Highlights

• Frozen Catalog & Intents: Strictly preserved at 65 skills (50 model-invoked + 15 manual) and 25 closed intents. Zero diff on vendor/skill-allowlist.txt and vendor/skill-policy.json.
• Item 1 (pageindex): Pinned to v0.2.21 (6d23caf416858f2ca136840305d1f479a86f6ef7), updated schema to 1-based inclusive physical page indices and nodes/node_id.
• Item 2 (hyperframes): Full commit SHA verified and corrected to 6037d228441e23e50cd6713a464d6158941cfcae.
• Item 3 (ninerouter): Full commit SHA verified and corrected to a99cf57239ff778b61e434c2786009d5ed1c412c, TLS auto-fallback insecure warning added.
• Item 4 (install-anti-slop): Pinned at e8c4880471b23ab7f216fba7b27d173a6ef07d4c (v0.1.2) in docs/source-wave.md with asset sync deferred to 0.1.14.
• Item 5 (playwright-qa): Refreshed with CLI v0.1.22 session commands (resize, set-color-scheme, set-reduced-motion), pin b85c7a736bb473bf55b584e54a09ffa698d6d871.
• Item 6 (scroll-craft): Pinned to 75d81f74e83692add18cd7a8a8e078b8a887a579 with 127.0.0.1 preview binding requirement and validated upstream SHA-256.
• Item 7 (architect): Added 4 new design red flags (Split ownership, Two ways to do one task, Importable internals, Hand-synced list).
• Item 8 (reflect / correct.md): Sanitized invariant ledger to empty template row with 4-level upstream enforcement rules.
• Item 9 (impeccable): Enriched audit/harden with touch & gesture failure checks and interrupted gesture cleanup.
• Item 10 (doctor / markitdown): Updated doctor markitdown checks to fail on non-existent 0.1.8 pin and prompt opencode-he markitdown enable.
• Item 11 (anti-slop copy rules): Integrated miqdad v3.2.20 owner-direction anti-slop rules into rules/03-prose-discipline.md and skills/impeccable/reference/taste-guard.md.
• Item 12 (serena): Corrected repository URL to oraios/serena (6707cd9b7efbaea1435fb7bfd7ff20d4b5916983).
• Item 13 (Matt Pocock version label): Standardized version label across provenance and sources to v1.3.0 (d81f3a1; tag 984a2c0 = version bump).
• Item 14 (pstack license audit evidence): Updated license audit evidence to e43c7ee (0.15.9).
• Item 15 (Design Bank fallback chore: cut 0.1.4 (front page and release notes) #4): Retired 404 release artifact fallback from sources, docs, and README.
• Item 16 (Cheap optionals): Standardized crawl4ai in sources, semgrep 1.179.0, browser-act CLI 1.4.2, English router phrases in AGENTS.md.
• Item 17 (Changelog & Readme harmonization): Updated CHANGELOG.md and README.md with all 0.1.13 changes.

Verification Passed

• Ran 397 unit tests in test suite (OK)
• bash tests/test-install.sh (OK)
• bash tests/test-idempotency.sh (OK)
• opencode-he verify (All PASS)
• opencode-he doctor (All PASS)
• Exact 72 lines in templates/AGENTS.md preserved
• Zero diff on vendor/skill-allowlist.txt and vendor/skill-policy.json