v0.1.9

• Fixed the attack-round-3 bug: REFACTOR_STEP shadowed the final attack step, so rounds stopped at 2/3 in both headless and interactive modes. The refactor step now sits after the third attack round, and the pipeline runs the full three rounds.
• Regression test: a headless REDGREEN_ATTACK run asserts all three rounds survive (events + summary "attacks 3/3").
• Interactive refactor tests updated for the extra executes per round.