docs: final cleanup and accuracy pass before public push

- Fix const inference bug: wrap inferred contracts with status-code guards
- Add integration test for status-guarded contract inference
- Tighten and deduplicate docs across verify, qualify, getting-started, cli
- Fix broken cross-references and TypeScript→JavaScript conversions
- Fix factual errors: license, Date.now(), sampling defaults, cache env
- Add missing features: --workspace, --generation-profile, json-summary formats
- Move stale extension docs (AUTH-RATE-LIMIT-REVISED, HTTP-EXTENSIONS) to attic
- Update PLUGIN_CONTRACTS_SPEC status to Implemented
- Build: clean | Tests: 849 pass, 0 fail

docs/llm-safe-adoption.md

@@ -18,10 +18,10 @@ Use `apophis init` with a preset:
 
 | Preset | Use Case |
 |---|---|
-| `safe-ci` | General CI-safe setup |
-| `llm-safe` | Ultra-minimal for LLM-generated code |
-| `platform-observe` | Observe-mode policy and runtime drift reporting |
-| `protocol-lab` | Multi-step flows and stateful testing |
+| `safe-ci` | Minimal CI-safe preset (default) |
+| `llm-safe` | Minimal preset for LLM-generated codebases |
+| `platform-observe` | Production-ready with observe mode |
+| `protocol-lab` | Multi-step flow and stateful testing |
 
 ```bash
 apophis init --preset llm-safe
@@ -108,6 +108,8 @@ export default {
 ### Route Template with Behavioral Contract
 
 ```javascript
+import crypto from 'crypto';
+
 app.post('/users', {
   schema: {
     'x-category': 'constructor',
@@ -134,7 +136,7 @@ app.post('/users', {
   }
 }, async (request, reply) => {
   const { name } = request.body;
-  const id = `usr-${Date.now()}`;
+  const id = `usr-${crypto.createHash('sha256').update(name).digest('hex').slice(0, 8)}`;
   reply.status(201);
   return { id, name };
 });