docs: replace prose placeholders in reproduction steps with executable commands

The audit found ~80 placeholders, and the damaging ones were where the
measuring apparatus itself was prose rather than a command:

  a6  "( curl ... ) & 를 20개 띄우고 wait"  — the 22.2s headline came from this
  a3  "<로그인 반복, sid 를 /tmp/sids 에>"  — the whole RPO measurement
  a3  "<sid 목록>"                          — the control it is compared against
  a5  "<수신 파드IP>"                       — the injection
  a8  writes /tmp/tok, reads /tmp/rt        — self-inconsistent, sent an empty token
  b3  $KC / $RT / $NEW never assigned
  c2  bare kcadm.sh with no kubectl exec
  a1  conntrack tuples written by hand, though the direction flips per restart

Each is now a shell-expandable form: pod IPs from jsonpath, the admin password
from the secret, ids from kcadm --format csv, conntrack tuples derived from
"conntrack -L" with awk rather than transcribed.

Then the rewritten commands were executed against the live cluster, and one
of them failed — the 20-way load generator, written as "kubectl run --rm -i",
lost its output stream twice in a row. That is a trap this series already hit
once, and the rewrite reintroduced it. A-6 now uses a resident probe pod that
collects into a file and is cat-ed once; verified 20/20 lines.

Evidence: docs/evidence/followup/05-command-reproducibility.txt

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

docs/experiment-a1-jgroups-transport-block.md

@@ -446,7 +446,11 @@ kubectl -n keycloak-lab delete networkpolicy a1-block-jgroups-transport
 
 ```bash
 sudo conntrack -L | grep 7800
-sudo conntrack -D -p tcp -s <src> -d <dst> --sport <sp> --dport <dp>
+# 위 출력의 src/dst/sport/dport 를 그대로 넣는다. 한 줄로 하려면:
+sudo conntrack -L 2>/dev/null | grep 7800 | awk '{
+  for(i=1;i<=NF;i++){ split($i,a,"="); t[a[1]]=a[2] }
+  print "sudo conntrack -D -p tcp -s "t["src"]" -d "t["dst"]" --sport "t["sport"]" --dport "t["dport"]
+}' | sh
 ```
 
 ### FD_SOCK2 와 포트 규약
@@ -524,8 +528,14 @@ kubectl -n keycloak-lab get pods -o wide | grep keycloak     # restarts=0 확인
 ssh kc-lab-1 'sudo conntrack -L | grep 7800'
 
 # 4. conntrack 삭제 (양쪽 노드, 양쪽 방향). 반영까지 약 3분
-ssh kc-lab-1 'sudo conntrack -D -p tcp -s <k1ip> -d <k0ip> --sport <sp> --dport 7800'
-ssh kc-lab-2 'sudo conntrack -D -p tcp -s <k0ip> -d <k1ip> --sport 7800 --dport <sp>'
+# 노드마다 자기 conntrack 표에서 7800 튜플을 뽑아 그대로 지운다.
+# 방향(누가 client 인지)은 재시작마다 바뀐다 — 그래서 손으로 적으면 틀린다(A-5 에서 실제로 틀렸다).
+for N in kc-lab-1 kc-lab-2; do
+  ssh $N "sudo conntrack -L 2>/dev/null | grep 7800 | awk '{
+    for(i=1;i<=NF;i++){ split(\$i,a,\"=\"); t[a[1]]=a[2] }
+    print \"sudo conntrack -D -p tcp -s \"t[\"src\"]\" -d \"t[\"dst\"]\" --sport \"t[\"sport\"]\" --dport \"t[\"dport\"]
+  }' | sh"
+done
 
 # 5. 분단 확인
 curl -s "http://localhost:19090/api/v1/query?query=vendor_cluster_size"