v0.4.24

Supersession-path fixes behind the live F6/S2 miss where a red suite reached the acceptance gate.

• Repoint scm-utils 0.3.5 → 0.3.6 (real install + lock normalized to the registry): addE2eToRunTestsScript no longer clobbers run-tests.sh (it line-anchors the E2E marker instead of substring-matching the marker quoted in the template header), so the honest-GREEN + deploy-gate verify run the suite again. The hollow, always-exit-0 run-tests.sh is why the superseded tests never failed closed.
• driver-refactor-superseded step input story:superseded-tests.json → story:refactor-verify-assess.json. flag-superseded writes the marker per AC; a story-granularity supersession spanning >1 AC had no story-root file, so resolveInputs fail-louded ("missing input") before the Driver spawned. The assess finalize aggregates the per-AC flags into the story-level marker's union, which the step now reads.
• refactorSupersededDirective reads that marker's flagged_tests (the union across ACs), replacing supersededTestsDirective on the refactor-superseded turn (which read only one open-AC's file, empty once every AC was done).
• flagSupersededTestsIfDirty — a deterministic REVIEW backstop (twin of the layering/ux backstops) flagging the build-refactor-routable superseded-tests smell on a real migration-drop supersession even when the verdict rubber-stamps refactor:false.

Full BDD 4635. Pins scm-utils 0.3.6.