Diagnose Codex plugin hooks for alpha.8

[Nam-Cheol]

Summary

• reclassify the previous no-heartbeat attempt as pre-trust and document the real /hooks review result
• keep activate apply activation-local until L2+ lifecycle work actually needs Quest/Capsule state
• stop durable lifecycle artifacts from storing raw prompt text and add launcher candidate-bin coverage

Validation

• npm test
• npm run typecheck
• npm run check:readme-sync
• git diff --check
• node bin/orange.js --version
• node bin/orange.js env --json
• node bin/orange.js binding status --host codex --json
• node bin/orange.js activate status --host codex --json
• node bin/orange.js doctor --json
• npm run build:standalone
• dist/standalone/orange.cjs --version
• dist/standalone/orange.cjs binding status --host codex --json
• npm run build:sea
• dist/standalone/orange-macos-arm64 --version
• dist/standalone/orange-macos-arm64 binding status --host codex --json
• npm pack --dry-run

Release gate

Blocked: trusted real hooks were observed through L1 and L2 PostToolUse, but a full real Codex L2 Stop/continuation lifecycle was not completed before session interruption. No tag, npm publish, or GitHub Release is part of this PR.