hod 0.1.12 — the impl promise now matches what is enforced

Reading the two role profiles side by side turned up a promise wider than its enforcement.

The impl role read "May edit code and commit; must not publish (push/merge) or spawn agents" — but nothing backs that second half. settings-impl.json denies four git commands and has no Agent entry; the Codex flag set carries network_access and writable_roots but omits features.multi_agent=false, a flag that would not hold in an interactive worker anyway.

The gap is symmetric — both CLIs are equally open at this role — so parity between them is unaffected. What was wrong is that the written promise claimed more than either side delivers, and a promise the controller cannot rely on is worse than a gap it knows about.

The promise now ends at publication. The Honest gaps entry states plainly that no-spawn at the impl role rests on prompt wording for both CLIs, and that the controller must check the commit, the absence of publication, and the absence of child-agent work.

Docs only — no behaviour change. Upgrade with hod update.