[nightly-regression] Cover live capture smoke command contract

[r3dbars]

Summary

• Adds command-contract coverage for the new run-live-capture-smoke.sh root wrapper.
• Guards that the live smoke remains explicit, env-gated, permission-aware, and mapped in docs/test matrix.

Nightly Risk Ranking

1. Live capture smoke command drift: new hardware/TCC gate could silently fall out of root-wrapper docs or matrix coverage. Fixed with tests-only coverage.
2. Production audio lifecycle signal: Sentry still shows APPLE-MACOS-17 Parakeet device rewarm failures in older releases, but current patch scope was not a safe code fix.
3. Meeting transcript failures: Sentry has APPLE-MACOS-1H on older release 1.1.37; current PostHog showed only 1 meeting transcript failure vs 38 saves in the last 24h.

Verification

• bash build-deps.sh --force
• bash build.sh
• bash run-tests.sh (2119 passed)

[r3dbars]

verdict: no-findings-but-human

findings: none
actions: none
head_sha: 9d1f933
fix_commit: none
checks: gh pr view; gh pr diff; Tests/README.md; scripts/dev/agent-preflight.sh; git diff --check origin/main...HEAD; bash build.sh; TRANSCRIPTED_DISABLE_FILE_LOGGER=1 bash run-tests.sh (2119 passed); codex-review --mode branch --base origin/main clean

manual_merge_handoff:
head_sha: 9d1f933
verdict: no-findings-but-human
blockers: draft PR; human signoff for live-capture smoke command-contract coverage
checks: gh pr view; gh pr diff; scripts/dev/agent-preflight.sh; git diff --check origin/main...HEAD; bash build.sh; TRANSCRIPTED_DISABLE_FILE_LOGGER=1 bash run-tests.sh (2119 passed); codex-review clean