Make the Owner Loop actor path earn its keep

forgekit-os/scripts/dispatch-owner-loop-requests.mjs — replaced the ad-hoc tsc verification instruction with the canonical actor-verify command, added explicit anti-pipe text, and wired in the skeleton generator

forgekit-os/scripts/promote-app.mjs — verifyCommitTypechecks now runs actor-verify against the checked-out candidate SHA instead of bare tsc

forgekit-os/scripts/promote-medinachf.mjs — same strengthening applied to the dormant copy

forgekit-os/scripts/actor-terminal-skeleton.mjs — NEW: emits the terminal-result shape with objective facts derived and every judgment field as <FILL_ME>

forgekit-os/scripts/validate-terminal-contract.mjs — NEW recursive sentinel scan with a depth cap, rejecting any result still carrying <FILL_ME>

forgekit-os/scripts/lib/terminal-evidence-preflight.mjs — NEW: extracted the credential-free pre-flight from resolve-owner-intent.mjs so tests exercise the production predicate

.github/workflows/actor-spawn.yml — replaced the node_modules cache (deleted by npm ci every run) with ~/.npm; removed the obsolete medinaCHF standalone install step

forgekit-os/scripts/tests/actor-terminal-skeleton.test.mjs — NEW, 11 cases

forgekit-os/scripts/tests/terminal-path-integration.test.mjs — NEW, 8 cases against the real preflight predicate

forgekit-os/scripts/tests/promote-verify-strength.test.mjs — NEW, 4 cases

forgekit-os/scripts/tests/candidate-commit-binding.test.sh — NEW, commit-scoped read + ref-derivation assertions

forgekit-os/scripts/tests/candidate-preservation.test.sh — NEW, real preserve-actor-state.sh for DONE and non-DONE

.github/workflows/tests/actor-spawn-dependency-path.test.mjs — NEW, 5 cases

forgekit-os/charges/owner-loop-wakeup-reliability-2026-09-28.md — NEW follow-up charge (proposal only)

forgekit-os/charges/owner-loop-privileged-isolation-2026-09-28.md — NEW proposal (decision, not implementation)