docs: Phase 1 review round — wake wording honesty, job-handle validity predicate, outbox/streams depth OQs

- C2: 'at-least-once wake delivery' collapsed to 'best-effort hints'
  (ADR-006 §1 + core-contract) — coalescing and the pg no-replay hole
  contradict per-commit wake promises; the guarantee table's row was
  already correct.
- W2: uniform job-handle validity predicate pinned (ADR-010 §2,
  core-contract, queues.md; verification-backlog row): processing
  state + unexpired deadline; D-12's missing-check not inherited.
- W1: outbox run_once worker semantics pinned in core-contract
  (pull op, ack/retry-on-curve, no heartbeat in delivery — honker
  parity, dual-execution window documented).
- W3: named-locks tx-seam posture stated (no lock_tx; acquisition is
  auto-commit; TTL discipline governs).
- C1 -> OQ-12: streams depth (key semantics w/ honker ground, event
  shape, ordering row, retention); method names pinned, depth open.
- New find -> OQ-13: the v1 TxHandle surface cannot express the
  transactional outbox enqueue (derived backing-queue name is
  reserved-prefix-rejected; honker's raw-Transaction seam unavailable);
  option set + decision rule sketched.
- README resolution order refreshed (OQ-06 resolved); ScheduleOpts +
  stream consumption-trigger lines added to core-contract.

docs/architecture/decisions/008-contract-v1-pinning.md

@@ -49,6 +49,11 @@ implement identically):
   `read_from_consumer`, `save_offset`, `get_offset`, `subscribe`
   (durable log, explicit offsets — the auto-checkpoint ambiguity is
   not inherited, per [ADR-006](006-wake-and-delivery-contract.md)).
+  *(Depth annotation 2026-10-05: the key's semantics, the `StreamEvent`
+  shape, the ordering guarantee row, and log retention are OQ-12's —
+  the method *names* are pinned here, their depth was left
+  un-pinned, mirrored in [core-contract.md](../core-contract.md)
+  streams.)*
 - queues v1 skeleton — `enqueue`, `claim_one`, `claim_batch`,
   `ack_batch`, `cancel`, `get_job`, `sweep_expired`; job handle
   `ack / retry / fail / heartbeat`; `EnqueueOpts { delay, run_at,
@@ -58,7 +63,12 @@ implement identically):
 - locks — `try_lock(name, owner, ttl) -> Option<Lock>` with `renew`
   and `release`.
 - outbox helper — `outbox(name)` with `enqueue` + `run_once` delivery
-  worker.
+  worker. *(Depth annotation 2026-10-05: the transactional *enqueue*
+  shape on the `TxHandle` seam is OQ-13's — the v1 method list has no
+  outbox enqueue method and the derived backing queue's reserved
+  prefix makes plain `enqueue_tx` illegal; see
+  [open-questions.md](../open-questions.md). `run_once` worker
+  semantics are pinned in core-contract.md's outbox section.)*
 - the tx seam — `begin_tx` / commit / rollback and the `*_tx` methods
   ([ADR-007](007-transactional-seam.md)).
 - `subscribe(consumer) -> Box<dyn EventReceiver>` — the durable