T9.9 - C4 + the backlog sweep: nine entries closed, each re-measured first

The colour half (C4, approved Aug 18 - "change them"):
- BL-004: the help centre's own 52-colour palette collapsed onto theme tokens
- BL-005: the JS-built dialogs (auth-guard, wp-format) and project-data's
  badges read tokens; the creator's categorical badge palette moved to
  theme-light as --wp-chart-1..10, read by computed style at boot; the print
  popup - a document with no stylesheet - inlines live token VALUES
- BL-008: the second brand blue (#2563d6) is deleted; .sop-inherited tints
  with THE blue at the same 7% alpha
- BL-009: the ninth amber (--wp-status-warning-text-alt) is deleted
- theme-light gained the two missing feedback tokens the consoles carried as
  literals (--wp-status-success-text / -error-text)
- NEW tests/color_check.py 4/4: zero hex literals outside theme-light.css,
  comments stripped (the BL-017 lesson), with the exceptions named in full
  (meta theme-color cannot resolve a var; rgba alphas are opacity recipes)

The correctness half, each re-measured before touching, as the task ordered:
- BL-011 STILL REPRODUCED: the sync badge mounted on the first async sync
  event; its holder now mounts at DOMContentLoaded, so the three overlays land
  in script order deterministically
- BL-012 fixed and MEASURED: baseline_shots freezes Date and Math.random per
  document; two consecutive admin captures came back byte-identical
- BL-016 fixed: a step-less wizard URL is step 1; stepper_check's deliberately
  wrong pin flipped with the fix, exactly as the entry planned
- BL-018 fixed both halves: the false-complete write now requires the
  {sop,state} production shape, and browser_check.seed writes that shape -
  which un-detoured four probes' creators from the SOP gate. stepper_check
  re-pointed at projB (no SOP) because its premise is a wizard someone is
  STARTING, and projA now legitimately restores a finished one.
- BL-019 fixed: a stored cost code that left COST_CODES is kept as an option
  (the gov_wosize pattern), so opening a package no longer blanks its record
- hold_check's AST sweep refined in passing detection: it flagged T8.3's
  notification-row .status as a release transition; it now reads wp.status only

Every wave-9-pointing backlog entry is closed with its measurement recorded.

Verification (each probe run alone): color_check 4/4, stepper_check 71/71,
validation_check 77/77, url_state_check 23/23, autosave_check 34/34,
a11y_check 22/22, launcher_check 58/58, aggregates_check 16/16,
kitting_check 26/26, hold_check 50/50, mobile_check 24/24, frame_check 38/38,
sections_check 95/95, form_structure_check 50/51 (BL-022's question).

Items: C4, BL-004, BL-005, BL-008, BL-009, BL-011, BL-012, BL-016, BL-018, BL-019

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

tests/browser_check.py

@@ -109,9 +109,34 @@ def seed(db_path):
         # Job A gets a complete SOP and two packages. Without a SOP the field view's
         # GET /api/sops/latest correctly answers 404 ("No SOP found") and the browser
         # logs it as an error — a false alarm in a page-boot check.
+        # BL-018 (fixed at T9.9): the production shape is {sop, state}, as
+        # ProjectData.pushSOP writes it. The old {"governance": ...} blob was a
+        # shape no code path produces, and it sent four probes' creators to the
+        # SOP gate until each imported set_sop() to overwrite it.
         db.add(models.Sop(id="sopA", project_id="projA", name="Job A SOP", number="A-1",
                           complete=True,
-                          data={"governance": {"disciplines": ["Mechanical", "Electrical"]}}))
+                          data={"sop": {"meta": {"tool": "Work Package Configuration", "sample": False},
+                                        "project": {"name": "Job A", "number": "A-1", "client": "Internal QA"},
+                                        "governance": {"disciplines": ["Mechanical", "Electrical"],
+                                                       "woFormat": "WP##-[TYPE]"},
+                                        "woTypes": [{"name": "Conduit Install", "enabled": True}],
+                                        "sections": {}},
+                                "state": {"project": {"name": "Job A", "number": "A-1", "client": "Internal QA",
+                                                      "division": "Internal", "site": "QA Lab"},
+                                          "team": {"pm": "", "apm": "", "cm": "", "qm": ""},
+                                          "teamIds": {"pm": "", "apm": "", "cm": "", "qm": ""},
+                                          "teamMembers": [], "sections": {},
+                                          "signoffRoles": [{"role": "Superintendent", "name": ""},
+                                                           {"role": "Foreman", "name": ""}],
+                                          "wpTypes": [{"name": "Conduit Install", "enabled": True}],
+                                          "governance": {"woformat": "WP##-[TYPE]", "wosize": "", "issuance": [],
+                                                         "disciplines": ["Mechanical", "Electrical"],
+                                                         "discMode": "choice", "instanceSuffix": "letter",
+                                                         "sizeHoursMax": ""},
+                                          "quality": {"qcreq": "Yes", "photo": "", "hold": ""},
+                                          "platforms": {"tracking": "CxAlloy", "commissioning": "CxAlloy",
+                                                        "trackingUrl": "", "commissioningUrl": ""},
+                                          "constraints": [], "sequence": [], "sources": []}}))
         db.flush()
         for wid, num, subj, status in (("wpA1", "WP01-COND", "1P horn/strobe conduit", "Issued"),
                                        ("wpA2", "WP02-WIRE", "1P wire pull", "In Progress")):