review(tool-goal,llm-replay): address ds-review-bot round one

- fromRequest placeholder: the last two braces of a consecutive } run now
  terminate the placeholder, so patterns may end with a brace quantifier
  (bot warning; the truncated pattern could even silently mis-match since
  an unclosed { is literal in JS regexes)
- document that derived JSONL entries pass through the same resolution
- widen ToolRunContext/deferContext seam docs beyond composite-only usage
  (source JSDoc, README pair, core-data-structures type-equiv blocks)
- pin direct-human blocked as uninstructed, completing the
  goal-round/direct-human x complete/blocked test quadrant

packages/support/llm-replay/tests/llm-replay.spec.ts

@@ -350,6 +350,12 @@ describe('installLlmReplay (through the real LlmService)', () => {
       expect(delta).toMatchObject({ argumentsDelta: '{"goal_id":"goal-42ab"}' })
     })
 
+    it('keeps a trailing brace quantifier inside the pattern (terminator is the run tail)', async () => {
+      const streamed = await streamScripted('{"goal_id":"{{fromRequest:goal-[0-9a-z]{4}}}"}')
+      const delta = streamed.find(chunk => chunk.type === 'tool-call-delta')
+      expect(delta).toMatchObject({ argumentsDelta: '{"goal_id":"goal-42ab"}' })
+    })
+
     it('fails loud when a placeholder matches nothing in the request', async () => {
       await expect(streamScripted('{"goal_id":"{{fromRequest:task-[0-9]+}}"}'))
         .rejects.toThrow(/fromRequest.*matched nothing/)