4.6.3: Keep workflow context local

Keep internal workflow context out of application changes and public handoffs.

• Add consistent local-only rules across both supported hosts.
• Generate PR drafts without private evidence identifiers, descriptions, or report paths.
• Add local Git exclusions and block publication of tracked session state, including files present in outgoing commit history.
• Refresh the generated host bundles and packaged metadata.

Validation: Node 24 local suite completed with 198/202 commands passing initially. All four failing documentation and generation checks passed after corrections. Source smoke, Pi smoke, strict typecheck, public-summary rendering, generated prompt consistency, and whitespace checks passed. GitHub Actions remains disabled.

Limitations: workflow attribution requires inspection of code and public text; automated publication checks cover local state paths. Restart host sessions after updating to load the new instructions.