docs(llmdoc): sync dogfood knowledge to the unified prompt contract

[Disdjj]

Summary

Follow-up to #40, running the update workflow it left for post-merge. delta reported 5 impacted docs in light mode with a clean worktree; recorder synced them to the current HEAD facts:

• architecture.mdx — the Retrieval Gate now covers both agent contracts (including investigator's native-tools handover boundary); the npx -y external-tooling semantics now span every prompt surface, declared once per surface, with bare npx and --no-install called out as forbidden forms.
• plugin-packaging/claude-and-codex.mdx — the cross-host gate-consistency contract now includes agents/*.md and .codex/agents/*.toml; recorded the current Codex-surface state: hand-synced replacement-style (bodies byte-identical, TOMLs parse), pending an acplugin ≥1.6.1 regeneration (older versions regress model: inherit and downgrade hooks); npx --no-install cleared from generated surfaces.
• plugin-packaging/development-and-release.mdx — corrected a stale fact: release.yml gates five version surfaces (cli/package.json, root package.json, .claude-plugin/plugin.json, marketplace.json plugins[].version, .codex-plugin/plugin.json), not three.
• workflows/init-and-update.mdx — new section on the recorder/workflow finalization split: recorder validates and repairs, the calling workflow runs the one-shot commit, and fingerprint --update only on explicit request.
• workflows/prune-and-upgrade.mdx — tightened the two-phase wording (CLI reports, recorder rewrites, workflow commits); recorded upgrade's fixed finalizer order (init-state when no ledger survives → validate → commit --all, order not reversible).

Finalized with llmdoc commit --all: docs commit + meta follow-up commit, all 7 fingerprints refreshed, baseline advanced. No volatile facts written (no version numbers, counts, or line totals).

Validation

• npx -y @tokenroll/llmdoc validate — ok (gated inside commit)
• status after commit — 0 impacted / 0 needs-review / 0 dirty

Note

status reports growth above the gate (~3336 tokens vs the ~2003 convergence baseline). Per the update contract this run does not touch convergence state; whether to run /llmdoc:prune is a separate decision.