feat(wave): native verify loop, brag launch card, optional crawl4ai MCP

[kuker24]

Summary

Body-only + FOREIGN_ON_DEMAND wave. No new catalog names. Product stays 0.1.4. Allowlist stays 62 (47 model-invoked / 15 manual).

Head: 23354df on wave-verify-brag-crawl4ai.

Track 1 — verification loop (not a /verify skill)

Claude-shaped generate → measure → fix → re-measure, mapped onto existing HighEnd machinery:

• /create-verification-skill + references/verification-loop.md (When / Corrective action / Evidence, anti-test-weakening)
• rules/01-verification.md corrective loop before done-gate
• playwright-qa/references/cls.md (SKILL.md kept at 56 lines, ≤200 budget)
• chrome-devtools-axi layout-shift attach on 127.0.0.1:9223

Project-local output remains .opencode/skills/verify-<app>/. Overlay allowlist unchanged.

Track 2 — brag launch card under hyperframes

• skills/hyperframes/references/brag.md — 18s / 60fps / 1080p / 4 beats → brag-output/brag.mp4
• Renderer stays hyperframes. Indonesian long-form tours stay id-demo-video.
• No catalog name brag.

Track 3 — Crawl4AI FOREIGN_ON_DEMAND

opencode-he crawl4ai enable            # http://127.0.0.1:11235/mcp
opencode-he crawl4ai enable --cloud    # https://api.crawl4ai.com/mcp + {env:CRAWL4AI_KEY}
opencode-he crawl4ai disable

Doctor: absent → OPTIONAL_ABSENT (rc 0). 0.0.0.0 or raw cloud secrets → FAIL. Scrapling remains a docs pointer only. Not a catalog skill. Not a browser-QA eye.

Freeze contract

• No allowlist add/retire
• No revive of ask-matt / grilling / wait-what / matt-implement
• Changelog under ## Unreleased only

Proof

• FACT: tests/test_skills.py 10/10 (62 = 47 + 15)
• FACT: tests/test_routing.py 11/11
• FACT: tests/test_playwright_qa.py 5/5 (56 ≤ 200)
• FACT: tests/test_license_audit.py 3/3
• FACT: tests/test_doctor.py 46/46
• FACT: suite 75 tests, 51.981s, exit 0