feat(model-router): wave 2-B — orchestrators declare phases, shifters and pins removed, frontmatter = off-state floor

The 15 Skill(effort-*) citers now call mcp__model-router__route per phase
(orchestrate at a dispatch span, reflect/plan for the skill's own level,
apply at the bookkeeping tail, escalate at the verify-secure caps); built-in
judgment dispatches carry an explicit effort= param. lib/effort-shift.md is
the route doctrine, lib/model-gate.md the mod rule (route answer = witness,
/route on as remedy). Deleted: skills/effort-*, lib/effort-pins.txt/.sh,
lib/model-check.sh, their tests, the installers' re-apply blocks. The mod
drops its Skill(effort-*) bridge. The tracked model:/effort: frontmatter
stays as the off-state floor, census-locked equal to the rows
(lib/tests/effort-routing.test.sh rewritten, 140 checks; analyzer → xhigh).

Contract .claude/tasks/contracts/2026-10-10-model-router-w2b-1045.md, plan
r4 § W2-B: GATE 0 MET, verifier ECARTS(7) then CONFORME 10/10, security
PASS, full make test green (design-tool-gate env red only).

agents/handover-doc-writer.md

@@ -57,7 +57,7 @@ The parent dispatches this agent TWICE, with the FULL PACKAGE both times
   (`STATUS: DONE | BLOCKED`, RUNID, phase-cluster count, per-chapter word
   counts) and STOPS — STEP 13-16, the final MD, HTML and PDF are NEVER
   this mode's job.
-- **`MODE: render`** — runs on the sonnet frontmatter pin. FIRST loads the
+- **`MODE: render`** — runs on its sonnet row (frontmatter = off-state floor). FIRST loads the
   draft: absent file, RUNID mismatch, or missing `DRAFT COMPLETE` sentinel
   → `STATUS: BLOCKED` naming the cause (fail closed — never synthesize a
   missing draft, never render a partial one). Then runs STEP 13 → 14 →