Drive all 4 remaining tasks to completion through full lifecycle

- actionable-phase-guidance: lifecycle artifacts + .state->complete
- harden-enforcement-layers: pre-push hook, install-hooks.sh, register-guards.sh, prompt pre-edit checks, harness contract update, install/update/upgrade script integration
- plug-stale-task-hole: lifecycle artifacts + .state->complete
- port-pi-guard: pi dev guard plugin, package.json, register-guards integration

All tasks passed bug_find, adversarial_bug_find, doc_review, and referee phases with PASS verdict.

plugins/automaton-guard-pi/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "automaton-guard-pi",
+  "version": "1.0.0",
+  "description": "Pre-edit guard for pi dev harness — blocks file edits when no automaton task is in an edit-allowed phase",
+  "main": "guard.ts",
+  "type": "module",
+  "peerDependencies": {
+    "@earendil-works/pi-coding-agent": "*"
+  }
+}