Fixes
- fix(doctor): shipped D5 fixtures are the recorded native payloads; D5 labels old hook errors as past (D-D5-FIXTURE-1, D-D5-PAST-1)
- fix(types): tsc --noEmit green; run typecheck in CI and gate (D-TSC-GATE-1)
- fix(codex): native plugin MCP resolves the host workspace, not the plugin cache dir; D3 reads the native plugin entries
- fix(policy): deny unbounded PowerShell file dumps (Get-Content, gc, type, [IO.File]::ReadAllText) like cat (D-PWSH-DUMP-1)
- fix(doctor): D5 measures hook cost over bare node, not node.exe start (D-D5-BARE-1)