fix: state persistence path, enforcer blocked logic, console bleed, test fixes, subagent enforcement

[htafolla]

Changes

1. State persistence path fix

• StateManager default was .opencode/state (directory), causing writeFileSync to create a file named state instead of writing to state.json. Changed to .opencode/state/state.json.
• Added resolveStateFilePath() helper to config-paths.ts.

2. Enforcer blocked logic cleanup

• blocked was only set if error contained "required" or "violation" strings, letting real errors slip through. Simplified to: any error = blocked.
• codexEnforcement now explicitly sets blocked based on combined errors instead of relying on spread of validationResult.
• contextAnalysisValidation was double-blocking — removed redundant check.

3. Console.* bleed-through elimination

• Replaced all console.log/warn/error in framework runtime code with frameworkLogger.log() across 30+ files.
• frameworkLogger writes to file only (.opencode/logs/framework/), never outputs to console.
• .catch(console.error) → .catch(() => {}) for process-level handlers.
• Plugin file strray-codex-injection.js updated.

4. Test fixes

• 6 tests asserting console.* calls updated to spy on frameworkLogger.log() instead.

5. Subagent (delegate_task) enforcement — Hermes plugin v2.2

• Subagents bypass all StringRay hooks. Added post-hoc enforcement via snapshot-and-diff.
• pre_tool_call: snapshots git diff --name-only HEAD
• post_tool_call: re-diffs, validates all new source changes through bridge quality gate
• Stats tracked: dispatches, validations, blocks (visible via /strray stats)

Verification

• ✅ 127/127 test files (2399/2399 tests) pass
• ✅ 5/5 pipelines pass
• ✅ Zero TypeScript errors
• ✅ Dist rebuilt clean