chore: sync the frontend template from 4dc033c to 8157ad4

The product was materialized from the template at `4dc033c` and has stayed
on it through 43 template commits, so it was missing all three rounds of
adapter remediation — including files it never had, such as the shared
`abortable-operation` primitive and the `exact-snapshot` decoder that
later fixes are written against. Taking only the newest round was not
possible for that reason: the delta is coherent only as a whole.

The product had not touched `src/adapters` at all since materialization,
so the 140-file delta applied with a three-way merge and no conflicts.
`package.json` was the single overlap and merged cleanly: the product owns
`name`, the template contributed `check:adapter-inventory`,
`check:remediation-ledger` and the image-resolve-signal type fixture.
All 24 product-owned files — README, index.html, CI workflow, i18n
catalog, home page, generated schemas, evidence scripts, component and
visual snapshots — are byte-identical to `main`.

`template.lock.json` now pins the synced revision and tree.

Verified in this repository, not inherited from the template: six type
projects, lint, nine gates (adapter inventory, remediation ledger,
registries, diagnostics, realtime boundaries, architecture, browser
file/storage boundaries, optional recipes, documentation), the production
build, and 2,054 of 2,073 tests. The 19 failures are all in
`tests/unit/ci-artifact-contract.test.ts` and are the same pre-existing
sandbox RLIMIT, EMFILE, umask and `/tmp` permission behaviour the template
records; four suites that failed once under parallel load pass in
isolation.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

tests/integration/http-scenario-catalog.test.ts

@@ -4,7 +4,10 @@ import path from "node:path";
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 
 import { readBoundedBytes } from "../../src/adapters/http/bounded-body-reader.ts";
-import { createContractHttpExecutor } from "../../src/adapters/http/http-execution-v3.ts";
+import {
+  createContractHttpExecutor,
+  type HttpExecutionObservation,
+} from "../../src/adapters/http/http-execution-v3.ts";
 import {
   type InstalledHttpContract,
 } from "../../src/contracts/external-contract-runtime.ts";
@@ -30,6 +33,13 @@ import {
   type HttpScenarioOperationId,
 } from "../mocks/scenarios/catalog.ts";
 
+/** The reference gateway owns these low-cardinality route identities. */
+function routeIdFor(operationId: HttpScenarioOperationId): string {
+  return operationId === "GET_REFERENCE_RESOURCE"
+    ? "REFERENCE_RESOURCE_DETAIL"
+    : "REFERENCE_RESOURCE_LIST";
+}
+
 const RECEIPT_PATH = path.resolve(
   "artifacts/tests/http-scenario-executions.json",
 );
@@ -191,11 +201,7 @@ async function executeScenario(
 ): Promise<HttpScenarioAssertionGroups> {
   const physicalAttempts: AttemptTrace[] = [];
   const sleeps: RetryReason[] = [];
-  const observations: Array<Readonly<{
-    outcome: string;
-    attempts: number;
-    certainty: string;
-  }>> = [];
+  const observations: HttpExecutionObservation[] = [];
   const caller = new AbortController();
   const scopeLifetime = new AbortController();
   let scopeCurrent = true;
@@ -225,10 +231,11 @@ async function executeScenario(
   const executor = createContractHttpExecutor({
     baseUrl: "https://api.test",
     maxRetryAttempts: 2,
+    // The reference contribution declares REFERENCE_EXTERNAL_BEARER, so the
+    // credential owner must supply the required proof header before dispatch.
     attachCredentials: () => ({
       kind: "READY",
-      headers: {},
-      credentials: "omit",
+      headers: { authorization: "Bearer scenario-token" },
     }),
     fetcher,
     random: () => 0,
@@ -265,6 +272,7 @@ async function executeScenario(
 
   try {
     const execution = executor.execute(operation, inputFor(entry.operationId), {
+      routeId: routeIdFor(entry.operationId),
       scope,
       signal: caller.signal,
       ...(entry.operationId === "CREATE_REFERENCE_RESOURCE"
@@ -296,7 +304,7 @@ async function executeScenario(
     const observation = observations[0]!;
     const observedSignal = scopeLifetime.signal.aborted ? "ABORTED" : "ACTIVE";
     const cancellationOwner =
-      observation.certainty === "TIMEOUT"
+      observation.terminalReason === "TIMEOUT"
         ? "DEADLINE"
         : caller.signal.aborted
           ? "CALLER"
@@ -314,13 +322,13 @@ async function executeScenario(
       }),
       effect: Object.freeze({
         outcome: String(outcome.effect),
-        observer: observation.certainty,
+        observer: observation.terminalReason,
       }),
       retry: Object.freeze({ count: sleeps.length, reasons: Object.freeze(sleeps) }),
       fetch: Object.freeze({
         count: physicalAttempts.length,
-        observerAttempts: observation.attempts,
-        agrees: physicalAttempts.length === observation.attempts,
+        observerAttempts: observation.attemptCount,
+        agrees: physicalAttempts.length === observation.attemptCount,
       }),
       media: Object.freeze({
         attempts: Object.freeze(physicalAttempts.map((attempt) => attempt.media)),