chore: sync the frontend template from 4dc033c to 8157ad4

The product was materialized from the template at `4dc033c` and has stayed
on it through 43 template commits, so it was missing all three rounds of
adapter remediation — including files it never had, such as the shared
`abortable-operation` primitive and the `exact-snapshot` decoder that
later fixes are written against. Taking only the newest round was not
possible for that reason: the delta is coherent only as a whole.

The product had not touched `src/adapters` at all since materialization,
so the 140-file delta applied with a three-way merge and no conflicts.
`package.json` was the single overlap and merged cleanly: the product owns
`name`, the template contributed `check:adapter-inventory`,
`check:remediation-ledger` and the image-resolve-signal type fixture.
All 24 product-owned files — README, index.html, CI workflow, i18n
catalog, home page, generated schemas, evidence scripts, component and
visual snapshots — are byte-identical to `main`.

`template.lock.json` now pins the synced revision and tree.

Verified in this repository, not inherited from the template: six type
projects, lint, nine gates (adapter inventory, remediation ledger,
registries, diagnostics, realtime boundaries, architecture, browser
file/storage boundaries, optional recipes, documentation), the production
build, and 2,054 of 2,073 tests. The 19 failures are all in
`tests/unit/ci-artifact-contract.test.ts` and are the same pre-existing
sandbox RLIMIT, EMFILE, umask and `/tmp` permission behaviour the template
records; four suites that failed once under parallel load pass in
isolation.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/features/reference-feature/adapters/create-reference-feature-input.ts

@@ -23,7 +23,8 @@ export type InstalledContractOperationExecutor = Readonly<{
   execute(
     operationId: string,
     input: unknown,
-    context?: Readonly<{
+    context: Readonly<{
+      routeId: string;
       signal?: AbortSignal;
       intent?: MutationIntent;
     }>,
@@ -48,6 +49,9 @@ export function createReferenceFeatureInstalledInput(context: Readonly<{
         operationId,
         input,
         {
+          // §7.4. The gateway owns the low-cardinality route identity; losing
+          // it here is what made every V3 diagnostic unattributable.
+          routeId: request.routeId,
           ...(signal === undefined ? {} : { signal }),
           ...(intent === undefined ? {} : { intent }),
         },
@@ -117,6 +121,15 @@ function projectExecutionOutcome(
       return failure("REQUEST_ABORTED", operationId, "REQUEST_ABORTED", {
         effect: outcome.effect,
       });
+    case "AUTH_INTEGRATION_FAILURE":
+      // §7.7. A configuration or collaborator breach, not a session state, so
+      // it must not drive the re-authentication surface.
+      return failure(
+        "AUTH_INTEGRATION_FAILURE",
+        operationId,
+        outcome.reason,
+        { effect: outcome.effect },
+      );
     case "TRANSPORT_FAILURE":
       return failure(
         outcome.failure.kind === "TIMEOUT"