feat(tok,acr): v5.6 B2 — load-pattern column in token-hotspots

Annotate every ranked TOK hotspot with the load-pattern triple
(loadPattern/survivesCompaction/derivationConfidence):

- hotspotLoadPattern() maps each discovery `type` → a deriveLoadPattern kind.
  Rules reuse activeConfig.rules for precise `scoped` handling; claude-md maps
  by scope. Two new deriveLoadPattern kinds back the rest: `command`
  (on-demand — body loads on /invoke) and `harness-config` (external —
  settings/keybindings/.mcp.json/hooks.json/plugin.json configure the CLI, not
  the model context, so they cost no per-turn context tokens). Honest split:
  the .mcp.json FILE is external; the MCP server's tool schemas are a separate
  `always` hotspot.

Byte-stability — the opposite of B1's manifest. token-hotspots IS a byte-equal
SC-6/SC-7 CLI, and its hotspots ride inside scan-orchestrator + posture, so the
change touched SIX frozen-v5.0.0 comparisons across five test files. Resolved by
preserving the frozen baselines: a shared tests/helpers/strip-hotspot-load-pattern.mjs
strips the additive triple before each byte-equal compare (proves the original
schema is byte-identical). SC-5 default-output snapshots (scan-orchestrator +
token-hotspots) regenerated — diff reviewed as additive-only.

Tests 1008→1012. Self-audit A/A, scanner count unchanged at 13 (C bumps to 14).
Completes v5.6 B (B1 manifest + B2 token-hotspots).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/snapshots/default-output/scan-orchestrator.json

@@ -445,6 +445,9 @@
             "source": "mcp:memory (.mcp.json)",
             "estimated_tokens": 500,
             "rank": 1,
+            "loadPattern": "always",
+            "survivesCompaction": "yes",
+            "derivationConfidence": "inferred",
             "recommendations": [
               "Review whether this source needs to load on every turn."
             ]
@@ -453,6 +456,9 @@
             "source": "CLAUDE.md",
             "estimated_tokens": 116,
             "rank": 2,
+            "loadPattern": "always",
+            "survivesCompaction": "yes",
+            "derivationConfidence": "confirmed",
             "recommendations": [
               "Move volatile top-of-file content to the bottom or extract to an @import-ed file.",
               "Split overlong CLAUDE.md into focused @imports (≤200 lines each)."
@@ -463,6 +469,9 @@
             "source": "hooks/hooks.json",
             "estimated_tokens": 81,
             "rank": 3,
+            "loadPattern": "external",
+            "survivesCompaction": "n/a",
+            "derivationConfidence": "inferred",
             "recommendations": [
               "Deduplicate overlapping entries — each duplicate inflates the per-turn schema payload.",
               "Move rarely-used permissions to a project-local override."
@@ -473,6 +482,9 @@
             "source": ".claude/settings.json",
             "estimated_tokens": 59,
             "rank": 4,
+            "loadPattern": "external",
+            "survivesCompaction": "n/a",
+            "derivationConfidence": "inferred",
             "recommendations": [
               "Deduplicate overlapping entries — each duplicate inflates the per-turn schema payload.",
               "Move rarely-used permissions to a project-local override."
@@ -483,6 +495,9 @@
             "source": ".mcp.json",
             "estimated_tokens": 45,
             "rank": 5,
+            "loadPattern": "external",
+            "survivesCompaction": "n/a",
+            "derivationConfidence": "inferred",
             "recommendations": [
               "Deduplicate overlapping entries — each duplicate inflates the per-turn schema payload.",
               "Move rarely-used permissions to a project-local override."

tests/snapshots/default-output/token-hotspots.json

@@ -11,6 +11,9 @@
         "source": "mcp:memory (.mcp.json)",
         "estimated_tokens": 500,
         "rank": 1,
+        "loadPattern": "always",
+        "survivesCompaction": "yes",
+        "derivationConfidence": "inferred",
         "recommendations": [
           "Review whether this source needs to load on every turn."
         ]
@@ -19,6 +22,9 @@
         "source": "CLAUDE.md",
         "estimated_tokens": 116,
         "rank": 2,
+        "loadPattern": "always",
+        "survivesCompaction": "yes",
+        "derivationConfidence": "confirmed",
         "recommendations": [
           "Move volatile top-of-file content to the bottom or extract to an @import-ed file.",
           "Split overlong CLAUDE.md into focused @imports (≤200 lines each)."
@@ -29,6 +35,9 @@
         "source": "hooks/hooks.json",
         "estimated_tokens": 81,
         "rank": 3,
+        "loadPattern": "external",
+        "survivesCompaction": "n/a",
+        "derivationConfidence": "inferred",
         "recommendations": [
           "Deduplicate overlapping entries — each duplicate inflates the per-turn schema payload.",
           "Move rarely-used permissions to a project-local override."
@@ -39,6 +48,9 @@
         "source": ".claude/settings.json",
         "estimated_tokens": 59,
         "rank": 4,
+        "loadPattern": "external",
+        "survivesCompaction": "n/a",
+        "derivationConfidence": "inferred",
         "recommendations": [
           "Deduplicate overlapping entries — each duplicate inflates the per-turn schema payload.",
           "Move rarely-used permissions to a project-local override."
@@ -49,6 +61,9 @@
         "source": ".mcp.json",
         "estimated_tokens": 45,
         "rank": 5,
+        "loadPattern": "external",
+        "survivesCompaction": "n/a",
+        "derivationConfidence": "inferred",
         "recommendations": [
           "Deduplicate overlapping entries — each duplicate inflates the per-turn schema payload.",
           "Move rarely-used permissions to a project-local override."