fix(rules): handle retired worktrees and pasted command output

[aldanux]

What changed, and why

Historical worktrees that no longer exist caused standing-rule commands to
report a consented project as unconsented. Resolve those stored paths through
their existing physical ancestor while retaining denial and symlink checks.

Pasted multiline elepha: output could also trigger an unwanted help injection.
Ignore it before opening the database and keep internal wrapper markers out of
verbatim replies. Both user-visible fixes have patch changesets.

How it was verified

• Build, both typechecks, Biome and git diff --check passed.
• The user ran npm test and reported a pass.
• The installed Codex CLI lists rules correctly; a pasted-output hook check
  returns not_command.
• Temporary-rule behavior passed in Codex and OpenCode with exact injection
  receipts. The user also confirmed Claude behavior; a matching local
  SessionStart receipt was not captured.
• The temporary rule was removed.

Before merging

• Patch changesets included.
• Conventional commits.