fix: gate invite-path RM triage on Finder replica in 4 demo scenarios - #2165

Bumps [pydantic-settings](https://github.com/pydantic/pydantic-settings) from 2.14.2 to 2.15.0.
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0)

---
updated-dependencies:
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.52.0 to 0.52.1.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.0...0.52.1)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.52.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [graphifyy](https://github.com/Graphify-Labs/graphify) from 0.9.32 to 0.9.35.
- [Release notes](https://github.com/Graphify-Labs/graphify/releases)
- [Changelog](https://github.com/Graphify-Labs/graphify/blob/v8/CHANGELOG.md)
- [Commits](Graphify-Labs/graphify@v0.9.32...v0.9.35)

---
updated-dependencies:
- dependency-name: graphifyy
  dependency-version: 0.9.35
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

… comments

- Updated specs/history-management.yaml (v1.3.0 → v1.4.0):
  - HM-01-001/002: learning/priority types keep file-based output;
    implementation/idea types with ISSUE-N source post GitHub comments
  - Added HM-08 group (6 requirements) specifying GitHub comment output mode,
    source resolution rules, fallback behaviour, and archive-history skill changes
- Updated notes/history-management.md:
  - Decision table revised to reflect dual-output model and backfill strategy
  - New section: GitHub Comment Output Mode (source resolution rules, skill
    behaviour change, comment format, backfill scope)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

…nson/markdownlint-cli2-action-24.2.0

chore(deps): bump DavidAnson/markdownlint-cli2-action from 24.1.0 to 24.2.0

…2.15.0

chore(deps): bump pydantic-settings from 2.14.2 to 2.15.0

chore(deps): bump uvicorn from 0.52.0 to 0.52.1

chore(deps-dev): bump graphifyy from 0.9.32 to 0.9.35

…with-issue-comments

docs: plan issue #2153 — replace plan/history files with GitHub issue comments

…Hub issue completion comments

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

history: archive idea IDEA-2153

- Add _resolve_issue_number(): returns positive int for ISSUE-N or bare
  integer source values; None for all other formats (HM-08-001, HM-08-003)
- Add _post_github_comment(): calls gh issue comment, returns comment URL,
  raises RuntimeError on non-zero exit (HM-08-001, HM-08-002, HM-08-005)
- Add _handle_normal_mode(): extracted from main() to reduce C901 complexity;
  branches to comment mode when entry_type in {implementation, idea} and
  source resolves to an issue number; falls through to file mode otherwise
- Update archive-history skill to capture append-history output and skip
  git add / commit / push when output is a GitHub comment URL (HM-08-004,
  HM-08-006)
- Add TestResolveIssueNumber (9 cases) and TestGitHubCommentMode (10 cases)
  covering HM-08-001 through HM-08-005

Closes #2159

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

…nt-history-output

Implement GitHub comment output mode in append-history

- Add SE-07-005 (structural slot-allowlist test) and SE-07-006 (behavioural
  render tests) to specs/semantic-extraction.yaml; annotate SE-07-002 with
  runtime-population note explaining which slots are reserved-not-populated
- Add pitfall entry to AGENTS.md: SemanticEntry phrases MUST use only
  {actor}, {object}, {target} — the slots the render pipeline actually fills
- Add test_no_phrase_uses_unpopulated_slots() and test_no_phrase_uses_unknown_slots()
  to test/test_semantic_registry.py (SE-07-005, CONCERN-1898)
- Add TestEventPhraseBehavioural and TestSummarySlotsFilledBehavioural to
  test/demo/test_report.py (SE-07-006, CONCERN-1898)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

… defaultdict masks unfillable slots

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

CLP-08-005: the Finder receives Announce(CaseLedgerEntry) broadcast by
run_invite_path_rm_triage before its genesis VulnerabilityCase hash is
seeded, causing ReconstructChainTailNode to raise an unanchored-chain
error.

Add wait_for_case_on_container(finder_client, case.id_) immediately
before run_invite_path_rm_triage in the four affected invite-path phases:

- fccv_handoff_demo._phase_c2_invites_vendor  (+ finder_client param)
- fvcv_extension_demo._phase_coordinator_suggests_vendor2  (+ finder_client param)
- fccv_extension_demo._phase_c2_suggests_vendor  (+ finder_client param)
- fvv_demo._phase_report_submission  (finder_client already present)

Pattern matches the fix applied in PR #2127 for fcvcv_demo and
fvcv_handoff_demo.  Regression tests added for all four scenarios
(TestFinderCaseReplicaWaitBefore*Triage), tagged @pytest.mark.spec("CLP-08-005"),
verifying both signature presence and call ordering.

Closes #2141

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>