fix(headless,runtime): OP7 review fixes + docs: OP3 re-review REOPEN (narrow)

TWO work products share this commit (a staged-index collision between the
coordinator's docs commit and the OP7 fixer's staged files — content
verified complete and coherent; only this message was wrong before the
amend):

1. OP7 review fixes (all nine findings from
   docs/research/2026-08-11-op7-review.md):
   - M1: HeadlessSessionDescriptor is a record; WithAccount uses 'with' non-destructive record copy,
     so a future property cannot be silently dropped; direct-CLI
     regression test proves CharacterOptions survives --user/--password.
   - M2 root fix: LiveSessionEventRouter skips BOTH Replace and the
     options notification on a trailer-truncated PlayerDescription — a
     truncated re-seed can no longer install zeroed words under an armed
     latch for OP7's automation to flush into 0x01A1.
   - SF1: schema keys validate as ordinal strings against the allowed
     names (numeric / comma-combined aliases rejected). SF2: both-true
     fellowship exclusion rejected at load, naming both keys. SF3: the
     onLoginCompleteSent observer moved after transit.EndTeleport().
     SF4: production-hook coverage for all three LoginComplete sites.
     SF5: test-script OP7 wire expectation corrected (batched ids ride
     only the 0x01A1).

2. docs/research/2026-08-11-op3-rereview.md — OP3 re-review verdict
   REOPEN (narrow): M1 byte-decode independently re-verified (6a 07 at
   all six sites); residuals R1 (gate script promises a timestamp prefix
   acdream doesn't render), R2 (null-controller player-mode still
   refuses), R3 (dormancy pin lacks stimulus) — coordinator fixes follow.

Full Release suite at this tree: 12,956 passed / 4 skipped / 0 failed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

src/AcDream.Runtime/Session/RuntimeLiveEntitySessionController.cs

@@ -875,11 +875,18 @@ public sealed class RuntimeLiveEntitySessionController
             RuntimeWorldHostAcknowledgementStage.TerminalProjected);
 
         _session.SendGameAction(GameActionLoginComplete.Build());
-        _onLoginCompleteSent?.Invoke();
         transit.EndTeleport();
         _log(
             $"headless: portal complete generation={generation} "
             + $"cell=0x{destination.CellId:X8}");
+        // SF-3 (Campaign OP OP7 review fix, 2026-08-11): invoke AFTER the
+        // teleport-completion tail, matching the other production call
+        // site's shape (OnSpawned, above). The observer body is not
+        // trivial — it runs the full diff, real SendGameActions, and
+        // event-hub publication to bot policies — so a throw from it must
+        // not abort transit.EndTeleport() with the retry token already
+        // discarded.
+        _onLoginCompleteSent?.Invoke();
     }
 
     /// <summary>