fix(events): address review — core.md turn-only taxonomy, RFC mechanism names, post-execute content snapshot

- core-data-structures/core.md: the `agent/*` taxonomy said "turn/step
  boundaries", but the step-boundary mirror emits were dropped — `agent/*`
  mirrors only turn boundaries; step boundaries are durable `step/start`/
  `step/end` session events. Narrow the catalog so plugin authors aren't pointed
  at nonexistent `agent/*` step events.
- interception-seams RFC: replace stack-position phrasing ("a later stack PR",
  "the stack's first change", "the PR that makes...") with durable mechanism/RFC
  names (the hook bridge packages, the event-domain-semantics RFC).
- tools/post-execute snapshot: `dispatched.content` was the same array reference
  as `result.content`, so a listener's in-place `push`/`splice` leaked into the
  returned content while a reassignment was masked — the "protect from tampering"
  comment over-claimed. Copy content into a fresh array so the snapshot guards
  the array structure; comment now states it is not deep immutability. Regression
  extended to push a block in-place and assert it does not leak (proven red
  without the copy).

packages/core/tools/src/index.ts

@@ -471,10 +471,13 @@ export class ToolRegistry extends Service {
     // authoritative-call-id requirement and the "preserve the dispatched
     // isError/error" contract. The decision is the ONLY sanctioned channel for a
     // listener to change the outcome (block, or accept-with-replacement); the
-    // call id is always the authoritative `exec.callId`.
+    // call id is always the authoritative `exec.callId`. `content` is copied into
+    // a fresh array so a listener's in-place `push`/`splice` on `result.content`
+    // cannot leak into the returned content either (the elements are the same
+    // references — the snapshot guards the array structure, not deep immutability).
     const dispatched = {
       callId: exec.callId,
-      content: result.content,
+      content: [...result.content],
       isError: result.isError,
       ...result.error ? { error: result.error } : {},
     }