Align reporting diagnostics and signed runtime guidance with MCP operations

[hopeatina]

The public MCP descriptor now advertises named workflow operations, so the reporting diagnostic must recognize that catalog without treating it as this peer's authenticated runtime inventory. Keep the signed commander runtime contract, fix the recommendation narrative path, and remove invented deviation-tool and blind write-retry guidance.

Direct chronicle and callable commander recommendation reporting both read chronicle.reportingNarrative.briefMarkdown, matching the canonical MCP producer. Client attribution is supplied only where declared, and a public descriptor is not treated as authenticated runtime discovery.

Native Codex listing metadata now follows the current public submission limits: a 25-character subtitle, the required HTTPS support URL, and guarded listing lengths and all four HTTPS URLs without credentials. The default briefing prompt uses the actual nested narrative path within its 128-character limit. Native root interface, MCP configuration, signed commander policy and lifecycle hooks remain coherent. This runtime package is distributed manually or through the local Codex marketplace: official public submissions exclude lifecycle hooks; the separate ChatGPT candidate is hook-free.

Validation: npm run check; npm test (218 passed, 2 existing Wizard integration skips), repeated after adversarial review. Focused negative cases reject overlong metadata, missing support URL, non-HTTPS/credential-bearing URLs and overlong URLs. npm pack --dry-run confirms the imported validator is packed alongside the native manifest and hooks. Verified published PR diff against the clean local commit and distinct commander runtime profile. Merged current main, including security release changes. Default operation discovery and Gateway terminal outbox remain distinct from the peer's signed runtime policy.