fix: 4 issues from malaria-rdt e2e run (#719 #720 #724 #727)

[jjackson]

Four well-contained fixes surfaced by the /ace:run malaria-rdt/20260606-0719 end-to-end run. Each is independent; batched into one PR to avoid N parallel version bumps.

Fixes

• Closes connect_send_flw_invite: Zod validates literal phone_numbers against ^\+\d+$ BEFORE ${VAR} env-substitution #719 — connect_send_flw_invite now accepts ${VAR} phone tokens (e.g. ${ACE_E2E_PHONE}) and env-substitutes them in the handler. The Zod regex ran before substitution, so the documented token form was rejected at the boundary. Regex relaxed to +<digits> OR a ${VAR} token; handler maps phone_numbers through resolveEnvSubstitution (same convention as api_key).
• Closes training-deck-render: buildSlidesRequestsV2 passes direct spec image "drive:<id>" unconverted to Slides createImage url #724 — training-deck-spec.resolveImageRef now handles a top-level drive:<id> ref. Only @alias-indirect drive: values were converted to the Slides-createImage-embeddable URL; a direct slide.image = "drive:<id>" fell to the bare-ref fallback (which doesn't recognize the drive: scheme) and reached the Slides API unconverted → rejected.
• Closes connect-program-setup-eval: active_window_status anchor is stale (expects draft at end of Phase 4; opp now activates synchronously) #720 — connect-program-setup-eval active_window_status anchor expected status=draft at end of Phase 4, but connect-opp-setup Step 6.5 activates synchronously with is_test=true by design (so Phase 6 has a signed-in test user; is_test keeps it out of prod analytics). Rubric corrected: fail case is now a draft/never-activated opp OR activation without is_test=true.
• Closes solicitation-management writes Phase 8 artifacts to run-folder ROOT instead of 8-solicitation-management/ subfolder #727 — solicitation-management gains a Step 0 that resolves/creates the 8-solicitation-management/ phase folder and anchors every artifact to it. Artifacts were landing at the run-folder root, invisible to verify_phase_artifacts, the ace-web summary, and opp-eval. Mirrors connect-setup's Step-0 pattern.

Deferred (not in this PR)

• Phase 6 Deliver: separate manual gps_accuracy_gate field (build deviation) blocks smoke + is bad FLW UX — verify Nova geopoint constraint first #723 (Deliver smoke gps_accuracy_gate recipe/selector) — needs live-device calibration + possibly an app-design rethink of the manual gate field; can't validate a selector/coordinate without a device.
• Phase 7: llo_weekly_review saved-run snapshot captures empty pipelines (alias data vs snapshot_inputs flw_kpis) — KPI cells render as dashes #726 — lives in jjackson/connect-labs (template Python), not this repo.

Testing

Unit suite green: 1917 passed, 31 skipped (integration gated). docs/atom-schemas.md regenerated — byte-identical (the regex isn't serialized into the dump).

🤖 Generated with Claude Code