v0.4.13

Seven kit fixes from the my-stockflow F1 run analysis (shift prevention upstream so the first story builds clean), + repoint bundled scm-utils 0.3.2 → 0.3.3.

• P1 — branding at GREEN: apply-theme re-applies after the DRIVER (idempotent post-turn, --if-guide no-ops on non-UI projects), so the driver-written shell carries the brand icon + app_name at GREEN instead of tripping the review ux-adherence refactor.
• P2 — driver self-check lint: the driver runs the same deterministic layering-clean + ux-adherence scans at pre-handoff (shared read-only scanners; the REVIEW backstop is unchanged), so a route→infrastructure import or placeholder shell is fixed in-turn, not in a review→refactor lap.
• P3 — e2e test honesty: new deterministic checks (a local-helper export/import mismatch, and a control-bypass .catch(()=>page.goto('?…')) route-around) in the navigator self-check, + navigator/test-strategist canon to test the shipped control, never a URL bypass.
• P4 — control semantics: the ux-designer IA refinement + the reflect criterion now pin and check each interactive control's TYPE, OPTION SOURCE, and reachable states (routing the shipped reflect-ia-defect to the ux-designer) — e.g. a filter is an accessible combobox over all values, not a native datalist over the filtered set.
• P7 — editor host-preference: findEditorCmd / start.md find_editor prefer the editor whose terminal you're in (CURSOR_TRACE_ID ⇒ Cursor, VSCODE_PID ⇒ VS Code), so the watcher/open stop opening files in the wrong editor.
• Repoint scm-utils 0.3.2 → 0.3.3: P5 repository-layer session door + P6 Playwright worker-port persistence (scaffold-side).