test(verify-pr): pin the launch gate's coverage and control clauses

Review on 0d06209b2d showed the four rig-isolation pins left two
clauses of the launch gate unasserted: deleting "covers every PR
anchor" or the mismatch-reporting control still passed 4/4. Pin both
so a future edit cannot silently weaken the gate.

Also name the clean-dist launch gate in the mutation-runner pointer,
so the section that proves a mutant reached dist and the rule that
proves the measurement tree's dist is clean cross-reference each other.

.qwen/skills/verify-pr/SKILL.md

@@ -968,8 +968,8 @@ least one test that imports it.
   violates read and execute at once, so dropping either check survived 990
   unit tests.
 - Runner hygiene (time caps, PID-only kills, restoring the tree, a tree of
-  its own apart from every live cell, syntax checks that do not execute)
-  is in **Rig hygiene (local rounds)** below.
+  its own apart from every live cell, the clean-`dist` launch gate, syntax
+  checks that do not execute) is in **Rig hygiene (local rounds)** below.
 
 **A test that can skip is coverage only where it executes.** A test gated on
 a capability (`assumeTrue`, `it.skipIf`, a platform filter) passes vacuously

scripts/tests/qwen-triage-workflow.test.js

@@ -4999,6 +4999,10 @@ describe('qwen-triage verify hardening round 2', () => {
     expect(flat).toContain('propagates the mutant into `dist/`');
     expect(flat).toContain('refuse the launch when it fails');
     expect(flat).toContain('Never hand-patch `dist/`');
+    // Review on 0d06209b2d: the four pins above left the anchor-coverage and
+    // mismatch-control clauses unasserted — deleting either still passed.
+    expect(flat).toContain('covers every PR anchor');
+    expect(flat).toContain('a control proving the check can report a mismatch');
     expect(flat).toContain('`process.exit()` skips `finally`');
     expect(flat).toContain('with `node --check`, never `import()`');
     expect(flat).toContain('Do not edit a shell runner while it executes');