v0.3.5 — merge verifies again, and the guarantees are a command

• merge re-runs verify on each PR right before merging it; a NOT OK stops the queue. Forgetting to verify is no longer possible.
• wave guarantees: every promise the plugin makes, where it is enforced, and whether a test pins it (today: 1 of 22 — the source-scan for forbidden git commands; the rest wait for #2). Part of this repo's own gate.
• 0.3.4 shipped with guarantees failing on its own table; the check now scans argument lists only. The gate that would have caught it is the reason #2 blocks everything.