[codex] harden mini program stability paths

[anarkh]

Summary

• Harden admin role refresh so cloud/runtime failures and malformed role responses preserve guest state and clear stale admin status.
• Add busy/error guards for detail trust and resolve actions, plus local duplicate reaction and resolve permission checks.
• Harden map page lifecycle async paths with request generations for refresh, location, discovery, and diagnostics timers.
• Query CloudBase comments newest-first before applying the 50-comment cap.
• Add focused static guard scripts and record the five-round multi-agent review evidence in the harness.

Validation

• node --check for changed runtime files and guard scripts
• node --no-warnings scripts/check-admin-auth-errors.mjs
• node --no-warnings scripts/check-detail-action-guards.mjs
• node --no-warnings scripts/check-store-permission-guards.mjs
• node --no-warnings scripts/check-cloud-comment-order.mjs
• node --no-warnings harness/check-map-feed.mjs
• node scripts/check-json.mjs
• node harness/check-harness.mjs
• node --no-warnings scripts/check-devtools-readiness.mjs
• git diff --check
• bash harness/init.sh

Notes

• npm run check could not be executed in this shell because npm is unavailable; the equivalent Node gates were run with the bundled runtime.
• DevTools and real-device UI validation remain unverified. Readiness still reports the 9420 service-port/smoke blocker as environment blocked, not UI passed evidence.
• For high-volume CloudBase comments, deployment should confirm an index for post_comments(postId, status, createdAt desc).