refactor(control-plane): render bootstrap steps through effect program

[huangruiteng]

Summary

R1 replacement-first change: bootstrap guided rendering now consumes
EffectProgram.

• effect_program_from_ordered_steps now retains the raw step mapping on
  EffectStep.raw.
• render_start_goal_guided_markdown reads guided_transaction.ordered_steps
  through EffectProgram instead of iterating raw dicts directly.
• Add a real bootstrap render test to prove the replacement path.

No public CLI/packet behavior changes.

Validation

• python -m pytest tests/control_plane/test_effect_program_ordered_steps.py tests/control_plane/test_start_goal_compact_projection.py: 34 passed.
• examples/bootstrap-command-pack-smoke.py: passed.
• cli-output-budget-regression-smoke and
  hot-path-interface-budget-smoke: passed.
• loopx canary premerge --from-git-diff: passed, self_merge_allowed=true,
  0 manual holds.
• Public boundary scan: passed.

Routing

• continuation-policy: independent_handoff
• excluded-agent: codex-quality-qualification
• claimed-by: codex-side-bypass

[huangruiteng]

Approval conclusion (author-owned PR; GitHub blocks formal self-approval)

Reviewed exact head 6543ad5. No blocking findings.

The PR makes the bootstrap guided-render path consume EffectProgram while
preserving raw step details for capability guards. Public output unchanged.

Validation

• python -m pytest tests/control_plane/test_effect_program_ordered_steps.py tests/control_plane/test_start_goal_compact_projection.py: 34 passed.
• examples/bootstrap-command-pack-smoke.py, CLI output budget, and hot-path
  interface budget: passed.
• loopx canary premerge --from-git-diff: passed, self_merge_allowed=true,
  0 manual holds.
• GitHub pytest, build, and dependency-review on this head: pass.
• Public boundary scan: passed.

Merge decision: approved after reviewer.