Remove Reflection's broad safety snapshot

[hamzamerzic]

Summary

• remove the pre-run broad safety snapshot from the app-owned runner
• replace sweeping guidance with revision-anchored, exact-path commits
• cover both the wrapper and runner against a return to broad unattended commits

Why

mobius-os/mobius#335 retired the same broad snapshot in the former platform-owned Reflection runner because it could commit unrelated concurrent work. app-reflection#20 then made this repository's runner and operating contract canonical, but that app-owned copy still carried the old snapshot and sweeping guidance.

This follow-up applies the established ownership contract at the current source of truth: each change records its starting revision and commits only its exact paths. The runner no longer creates a broad best-effort commit before the agent starts.

Verification

• npm test — 37 JavaScript checks and 61 Python checks passed
• package validation — 0 errors, 0 warnings
• git diff --check

[hamzamerzic]

Superseded by #33, which carries this exact-path runner fix together with the dependent terminal-handoff contract and passed the full app suite.