fix(vibe): enforce QA lesson checks

[shafty023]

Summary

• Encode all 11 open QA lessons in the owning vibe agents and handoff guidance.
• Add concrete checks for real browser story plays, real touch devices, fixture and layout safety, overlap research, host adapter coverage, criterion provenance, version collisions, and weekly project fallback.
• Add contract coverage plus five shared Claude Code and Codex eval cases.
• Bump both vibe manifests to 1.0.56 and refresh generated documentation.

Affected areas

• Vibe verification, Storybook, requirements, guardrails, adversarial review, ticket, and handoff prompts
• Shared closedloop graph guidance
• Vibe contract tests and eval cases
• Vibe manifests, README, and root changelog

Validation

• pytest plugins/: 2386 passed, 3 skipped
• pytest vibe tools and Codex runner tests: 315 passed
• Ruff: passed
• Pyright: passed
• Plugin manifest typecheck and tests: passed
• TypeScript toolchain typechecks, tests, and builds: passed for manifest, design inventory, cost, and guided QA lanes
• Plugin Node suite: 423 passed with one timing failure; the failed black box file passed 2 of 2 in isolation
• Both eval harnesses discover the five shared cases; model execution was not run because it creates a private plugin installation and this task forbids plugin installation