refactor(detekt): extract magic-number constants, wrap long lines, drop legit suppressions

Mechanical detekt cleanup across apps/core/infrastructure (behavior-preserving):
- MagicNumber 62->10: named constants + removed 'legit' MagicNumber suppressions
  (Tier level from ordinal, ReplayInferenceProvider CHARS_PER_TOKEN, ConfigLoader
  DEFAULT_* consts, capability scores, HTTP ranges, column widths, etc.)
- MaxLineLength cut to ~0 in production modules (line wraps, no logic change)
- Dropped one dead parameter (ConfigLoader.parseArray lineNum)

Structural findings (ReturnCount/LongMethod/Complexity/LargeClass) left for a
deliberate decomposition pass. Full build + detekt gate green.

core/toolintent/src/main/kotlin/com/correx/core/toolintent/rules/ManifestContainmentRule.kt

@@ -43,7 +43,8 @@ class ManifestContainmentRule : ToolCallRule {
 
         for (raw in candidatePathStrings(input.paramRoles, input.request.parameters)) {
             val candidate = Path.of(raw)
-            val resolvedInput = if (candidate.isAbsolute) candidate else input.workspace.workspaceRoot.resolve(candidate)
+            val resolvedInput =
+                if (candidate.isAbsolute) candidate else input.workspace.workspaceRoot.resolve(candidate)
             val resolvedReal = input.probe.resolveReal(resolvedInput)
             val inWorkspace = resolvedReal.startsWith(workspaceReal)
             val relative = if (inWorkspace) workspaceReal.relativize(resolvedReal).toString() else raw

core/toolintent/src/main/kotlin/com/correx/core/toolintent/rules/PathContainmentRule.kt

@@ -35,7 +35,8 @@ class PathContainmentRule : ToolCallRule {
 
         for (raw in candidatePathStrings(input.paramRoles, input.request.parameters)) {
             val candidate = Path.of(raw)
-            val resolvedInput = if (candidate.isAbsolute) candidate else input.workspace.workspaceRoot.resolve(candidate)
+            val resolvedInput =
+                if (candidate.isAbsolute) candidate else input.workspace.workspaceRoot.resolve(candidate)
             val resolvedReal = input.probe.resolveReal(resolvedInput)
             val exists = input.probe.exists(resolvedInput)
             val privileged = privilegedReal.any { resolvedReal.startsWith(it) }

core/toolintent/src/test/kotlin/com/correx/core/toolintent/ReferenceExistsRuleTest.kt

@@ -26,7 +26,13 @@ class ReferenceExistsRuleTest {
     private fun abs(p: String): Path = Path.of(p).toAbsolutePath().normalize()
 
     private fun input(pathArg: String, probe: WorldProbe) = ToolCallAssessmentInput(
-        request = ToolRequest(ToolInvocationId("i"), SessionId("s"), StageId("st"), "file_read", mapOf("path" to pathArg)),
+        request = ToolRequest(
+            ToolInvocationId("i"),
+            SessionId("s"),
+            StageId("st"),
+            "file_read",
+            mapOf("path" to pathArg),
+        ),
         capabilities = setOf(ToolCapability.FILE_READ),
         workspace = WorkspacePolicy(workspace, emptyList()),
         probe = probe,

core/toolintent/src/test/kotlin/com/correx/core/toolintent/StaleWriteRuleTest.kt

@@ -27,7 +27,13 @@ class StaleWriteRuleTest {
     private fun abs(p: String): Path = Path.of(p).toAbsolutePath().normalize()
 
     private fun input(onDisk: String, session: SessionContext) = ToolCallAssessmentInput(
-        request = ToolRequest(ToolInvocationId("i"), SessionId("s"), StageId("st"), "file_edit", mapOf("path" to target)),
+        request = ToolRequest(
+            ToolInvocationId("i"),
+            SessionId("s"),
+            StageId("st"),
+            "file_edit",
+            mapOf("path" to target),
+        ),
         capabilities = setOf(ToolCapability.FILE_WRITE),
         workspace = WorkspacePolicy(workspace, emptyList()),
         probe = FakeProbe(mapOf(abs(target) to onDisk)),

core/toolintent/src/test/kotlin/com/correx/core/toolintent/WriteScopeRuleTest.kt

@@ -23,7 +23,13 @@ class WriteScopeRuleTest {
     }
 
     private fun input(pathArg: String, active: ActiveTask?) = ToolCallAssessmentInput(
-        request = ToolRequest(ToolInvocationId("i"), SessionId("s"), StageId("st"), "file_write", mapOf("path" to pathArg)),
+        request = ToolRequest(
+            ToolInvocationId("i"),
+            SessionId("s"),
+            StageId("st"),
+            "file_write",
+            mapOf("path" to pathArg),
+        ),
         capabilities = setOf(ToolCapability.FILE_WRITE),
         workspace = WorkspacePolicy(workspace, emptyList()),
         probe = FakeProbe(),
@@ -34,7 +40,10 @@ class WriteScopeRuleTest {
 
     @Test
     fun `no active task means nothing to enforce`() {
-        assertEquals(RiskAction.PROCEED, rule.assess(input("/work/project/core/billing/X.kt", active = null)).disposition)
+        assertEquals(
+            RiskAction.PROCEED,
+            rule.assess(input("/work/project/core/billing/X.kt", active = null)).disposition,
+        )
     }
 
     @Test