feat(curator): tool extension, generated prompt check, two pi findings

curator-tools.ts registers no schema of its own: it fetches the specs from the
backend bridge, so contracts.py stays the single owner and there is no TypeScript
copy to drift. It refuses to activate without a bridge URL and token, because an
agent that silently loses its tools still answers -- from the model's memory of
what a media library might contain.

deploy-scenario.sh now vendors listed shared/extensions modules into
.pi/extensions/_shared/. A tracked extension importing from shared/ cannot
resolve that path once installed outside the repository, so the deployed tree has
to be self-contained; this overwrites rather than merges, keeping the repository
authoritative. common.sh gains toml_list, using tomllib rather than more awk
because an array can span lines or carry comments.

verify-generated.sh checks that generated regions in tracked prompts match the
backend that generates them, and is wired into the pre-commit hook. This is
needed because of finding 22 below: the tool list has to be copied into the
prompt, and a copy drifts silently.

Two findings recorded in docs/pi-runtime-notes.md, both measured:

  21. An extension that fails to import is silent -- exit 0, empty stderr, no
      tools. A missing --extension path exits 1 with a clear message, but a
      module that throws while loading reports nothing. The agent then invented a
      complete library listing with plausible episode counts, quality and size.
      A later identical run said it had no data instead, so the failure is both
      silent and inconsistent.

  22. --system-prompt suppresses the tool list. The customPrompt branch returns
      before toolsList and guidelines are built, so promptSnippet and
      promptGuidelines are inert. The tools stay callable over the provider API,
      so tool use becomes a coin flip: one run in four looked at the library and
      three said they had not been given any results.

SYSTEM.phase3.md is staged alongside the deployed SYSTEM.md rather than replacing
it: profile.toml still describes the phase-0 configuration that is actually
running, and the live service is untouched.

scripts/deploy-scenario.sh

@@ -73,6 +73,34 @@ while IFS= read -r rel; do
   fi
 done < <(cd "$DIR/workspace" && find . -type f -printf '%P\n' | sort)
 
+# ---------------------------------------------------------------------------
+# 1b. Vendored shared extensions
+#
+# A tracked extension that imports from shared/extensions/ cannot resolve that
+# path once installed outside the repository. The listed modules are copied into
+# .pi/extensions/_shared/ so the deployed tree is self-contained, while the
+# repository stays the single source of truth: this overwrites, never merges.
+# ---------------------------------------------------------------------------
+SHARED="$(toml_list "$PROFILE" resources shared_extensions)"
+if [ -n "$SHARED" ]; then
+  while IFS= read -r mod; do
+    [ -n "$mod" ] || continue
+    src="$REPO_ROOT/shared/extensions/$mod"
+    [ -f "$src" ] || die "profile lists shared extension '$mod', which does not exist"
+    dst="$WORKSPACE/.pi/extensions/_shared/$mod"
+    if [ -f "$dst" ] && cmp -s "$src" "$dst"; then
+      continue
+    fi
+    CHANGES=$((CHANGES + 1))
+    if [ -f "$dst" ]; then info "  update  .pi/extensions/_shared/$mod"
+    else info "  vendor  .pi/extensions/_shared/$mod"; fi
+    if [ "$APPLY" -eq 1 ]; then
+      install -d -m 700 "$(dirname "$dst")"
+      install -m 600 "$src" "$dst"
+    fi
+  done < <(printf '%s\n' "$SHARED")
+fi
+
 # Executables under bin/ need the execute bit back.
 if [ "$APPLY" -eq 1 ] && [ -d "$DIR/workspace/bin" ]; then
   while IFS= read -r rel; do