fix(kernel,tools,workflow): session-robustness QA sweep

Uncommitted work from the session-robustness-and-dox branch sweep
(docs/qa/QA-session-robustness-and-dox.md), verified alongside the
compression/context fixes:

- SandboxedToolExecutor: validate tool args centrally before dispatch. A
  malformed/missing-arg call becomes a recoverable ERROR: (surfaced with the
  tool's arg schema so the model can correct + retry) instead of stranding
  the stage with no artifact. + validation test.
- PlanLinter: seed artifacts (analysis) produced by the planning phase count
  as available producers, so a plan stage that `needs` them isn't flagged as
  an unproduced-need; H1 unproduced-needs + trap-state checks. + tests.
- DefaultSessionOrchestrator: live-QA robustness fixes (event-tail /
  per-stage budget + retry handling).
- workflow prompts/configs: DOX AGENTS.md alignment + freestyle/task/role
  prompt tweaks.
- SessionOrchestratorIntegrationTest: coverage for the above.
- FreestylePlanningWorkflowTest: allow list_dir in analyst tools (follows the
  list_dir wiring in 968cbfa).
- QA plan doc for the branch sweep.

examples/workflows/role_pipeline.toml

@@ -36,7 +36,7 @@ start = "analyst"
 id = "analyst"
 prompt = "prompts/analyst.md"
 produces = [{ name = "analysis", kind = "analysis" }]
-allowed_tools = ["file_read", "ShellTool", "task_search", "task_context", "task_create"]
+allowed_tools = ["file_read", "shell", "task_search", "task_context", "task_create"]
 ground_references = true
 token_budget = 16384
 max_retries = 2
@@ -58,7 +58,7 @@ max_retries = 2
 id = "decomposer"
 prompt = "prompts/task_planner.md"
 needs = ["design"]
-allowed_tools = ["file_read", "ShellTool", "task_search", "task_context", "task_decompose", "task_create"]
+allowed_tools = ["file_read", "shell", "task_search", "task_context", "task_decompose", "task_create"]
 require_task_decompose = true
 token_budget = 16384
 max_retries = 2
@@ -73,7 +73,7 @@ prompt = "prompts/implementer.md"
 produces = [{ name = "patch", kind = "file_written" }]
 claim_task = true
 allowed_tools = [
-    "file_read", "file_write", "file_edit", "ShellTool", "propose_scope",
+    "file_read", "file_write", "file_edit", "shell", "propose_scope",
     "task_create", "task_update", "task_context", "task_search",
 ]
 token_budget = 32768