feat(workflows): clear temp/ at wrap, plus three rule and template fixes

Four proposals from other projects, reviewed and applied together.

wrap-it-up gains a Clear temp/ step in Step 3. temp/ is gitignored everywhere, so nothing there survives deletion. The step confirms before removing anything that reads as in-progress rather than throwaway, and skips where temp/ isn't gitignored. This closes the last open clause of the working/temp work from 2026-07-20.

interaction.md drops the fenced-code-block carve-out. Chat output carries no markup at all now, fences included. Fences don't invert the way inline spans do, but the carve-out kept pulling them back in.

sentry.org folds in four notes from its first two live runs elsewhere. Two are traps for anyone reviewing a night by git log: archive-done touches .gitignore on its first run, and a mirror-only project's quiet fires leave no commits at all. The others make property sweeps sanctioned quiet-fire work and split the task audit into a mechanical hourly subset plus a nightly judgment half.

The notes.org template now lints clean, down from four flags in every project on every sweep. Two of those were mechanical, so lint-org --fix anywhere would have rewritten the template and drifted it from canonical.

1 files changed, 0 insertions, 19 deletions

diff --git a/working/wrapup-temp-cleanup/proposed.diff b/working/wrapup-temp-cleanup/proposed.diff
deleted file mode 100644
index 5c2375c..0000000
--- a/working/wrapup-temp-cleanup/proposed.diff
+++ /dev/null
@@ -1,19 +0,0 @@
---- claude-templates/.ai/workflows/wrap-it-up.org	2026-07-19 21:07:49.848788027 -0500
-+++ /tmp/wu.org	2026-07-23 02:48:49.759571128 -0500
-@@ -189,6 +189,16 @@
- emacs --batch -q -l .ai/scripts/todo-cleanup.el --archive-done --check todo.org
- #+end_src
- 
-+*** Clear temp/
-+
-+#+begin_src bash
-+[ -d temp ] && find temp -mindepth 1 -delete && echo "temp/ cleared"
-+#+end_src
-+
-+=temp/= holds throwaway artifacts — discarded prototypes, scratch output, intermediate data (see =working-files.md=). It's gitignored in every project, so nothing here rides a commit and nothing is recoverable from git once deleted. Clearing it at wrap is what keeps ephemeral work from silting up across sessions, and it's the counterpart to =working/=, which is tracked and *never* cleared here.
-+
-+Two guards. Confirm before deleting if =temp/= holds anything a reasonable reader would call in-progress rather than throwaway — misfiled work belongs in =working/=, so move it there instead of deleting it. And skip the step entirely in a project where =temp/= is not gitignored, since that means the project is using the directory for something else.
-+
- *** Sync child priorities
- 
- #+begin_src bash