docs: bring every capability-map row up to date

[abrichr]

One PR for every map change, so ten sessions don't each edit CAPABILITIES.md.

• New status On main: merged, ships in the next release. "Released" stays PyPI-only.
• On main: guarded save (feat(flow): guarded save around any agent's write #1258), record checks from the app's own reads (feat(flow): build a working record check from the app's own reads #1284), the change ledger (feat(flow): change ledger, write-ordering lint and declared undo after a stop #1263), the phone showing what a save writes (feat(flow): show the values a save writes on the phone (presentation.fields) #1257), shadow mining (feat(flow): induce shadow-mined episodes into candidate drafts #1212), the variant router (feat(flow): deterministic variant router over separately admitted bundles #1264), multi-surface programs (feat: multi-tab, popup, and backend-switching surfaces (carry-over of openadapt-flow#533) #1197), scrub by default (feat(privacy): scrub everything that leaves the machine by default #1262).
• New rows, in review: read-back on desktop/RDP/Citrix (flow: check a desktop, RDP or Citrix save by looking the record up #1280), the recording teaches the check (flow: the recording teaches the check #1290), checked later (flow: checked later, saved and awaiting its check #1297), the server's answer as evidence (flow: keep the server's answer to a save, labelled same_screen #1298), parallel workers (feat(flow): parallel worklists with one session per worker, measured #1296), pre-approved repairs (feat(flow): standard changes - repairs a person approved in advance #1294), the pixel path across display scaling (flow: keep pixel-path replays running across display scaling and ClearType #1286), compile-agent and the code-as-action agent (feat(flow): compile-agent — compile an agent's first verified run into a zero-token program #1277, feat(flow): code-as-action agent for compile-agent run 1 #1305), and the scoreboard (demo: CUA to program on openIMIS claims, plus the scoreboard (arms 1-3) #1303).
• The privacy row points at packages/privacy, and the fault test is worded as a coverage test (8 kinds of bad save, 9 runs each).
• llms.txt and llms-full.txt are regenerated.

🤖 Generated with Claude Code