fix: harden topology-satisfied handoff guidance

[Stahl-G]

Summary

• add structured forbidden replay actions for topology-satisfied Screener stages in handoff protocol
• make default topology handoff/runtime prompts explicitly forbid Screener delegation and stage-complete --stage screener
• lock default/strict topology behavior in status, Hermes, generated command, and packaged handoff smoke tests

Validation

• python3 -m pytest -q tests/test_start_commands.py -k "topology or handoff"
• python3 -m pytest -q tests/test_status_commands.py -k "topology or timing"
• python3 -m pytest -q tests/test_hermes_adapter.py -k "delegation_sequence or prompt"
• python3 -m pytest -q tests/test_subagent_first_contract.py -k topology
• python3 -m pytest -q tests/test_start_commands.py tests/test_status_commands.py tests/test_hermes_adapter.py tests/test_subagent_first_contract.py tests/test_agent_config_generation.py
• python3 -m pytest -q
• python3 scripts/check_product_baseline.py
• python3 scripts/check_release_consistency.py --no-tag
• python3 scripts/check_skill_contract.py
• python3 scripts/check_briefloop_skill_freshness.py
• python3 scripts/sync_hermes_plugin_skills.py --check
• python3 scripts/generate_agent_configs.py --check
• python3 scripts/check_version_consistency.py
• PYTHONPATH=src python3 scripts/check_capabilities.py
• python3 scripts/check_runtime_asset_parity.py
• python3 -m compileall -q src tests scripts
• git diff --check
• non-editable install + scripts/ci/smoke_packaged_topology_handoff.py