fix: the second lekerepo trial's faults that made a result wrong or misleading

voyage-lekerepo trial 2 (2026-10-08), report section A; the operator decided
they are fixed before the next release:
- A1: a /code-review finding whose category is simplification, efficiency,
  style or readability enters as CODE_REVIEW_IMPROVEMENT (MINOR), not MAJOR.
- A2: recommended_action is the engine's own fix when transcribed, otherwise
  a test-first step; never the failure scenario dressed as a remedy.
- A3: a /code-review finding outside the exact range it was given is declined
  and listed, but no longer holds ALLOW back; /security-review's still does.
- A4: the manifest must_contain recipe uses grep -E -e ... -- so a pattern
  like --sep is not read as an option.
- A5: indented sub-points belong to their criterion (counted), and a
  criterion with sub-points and no command warns BRIEF_SC_SUBPOINTS.
- A6: a brief requiring bash 3.2 whose criterion runs plain bash warns
  BRIEF_SC_BASH_NOT_PINNED; /trekbrief proposes /bin/bash.
- A7: the plan template's and /trekplan's checkpoints stage the step's files.

Tests fail on 5f9faee first (tests/lib/trial2-fixes.test.mjs, 11 of 14).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

agents/review-coordinator.md

@@ -49,15 +49,18 @@ You will receive a prompt containing:
   mode, only the latter), plus the engine payloads from Claude Code's own
   review: `claude-code-review` (`/code-review`) and `claude-security-review`
   (`/security-review`, not in `quick`). Engine findings carry the catalogue
-  keys `CODE_REVIEW_DEFECT` / `SECURITY_REVIEW_VULNERABILITY` (or a narrower
-  key) and are treated exactly like any reviewer's findings.
+  keys `CODE_REVIEW_DEFECT` / `CODE_REVIEW_IMPROVEMENT` (MINOR: simplification,
+  efficiency, style, readability) / `SECURITY_REVIEW_VULNERABILITY` (or a
+  narrower key) and are treated exactly like any reviewer's findings.
 - **Expected reviewers** — the names that were due, engines included, and
   each engine recorded as not run with its reason. A name that did not report
   forbids `ALLOW` (Pass 4).
 - **Engine findings outside the review scope** — the `out_of_scope` list from
-  `lib/review/engine-findings.mjs`. Each one is `unverified`
+  `lib/review/engine-findings.mjs`. List each one under `## Declined to Judge`
   (`engine:out-of-scope`): a real claim on a file this review did not cover.
-  List it under `## Declined to Judge`; it forbids `ALLOW`.
+  One from `/security-review` is `unverified` and forbids `ALLOW` (its base is
+  wider than this review). One from `/code-review` does not: it was given
+  exactly this range, so it does not hold `ALLOW` back.
 - **Triage map** — `{file → deep-review|summary-only|skip, reason}` from
   the /trekreview triage gate.
 - **Brief metadata** — `task`, `slug`, `project_dir`, `brief_path` from