P3 review: the surface, docs and proofs

Split kernel::entry_flows into entry_movements and flows_of so the
reversal-mirror proof fits CI; prove runs the fast harnesses, prove-slow
the 8 slow ones (own job in scheduled CI), prove-all both. Laws in
verification.md renumbered 1-31 with a table of all 55 harnesses.

MCP docs checked against the 115 tools (about 60 fixes) with a test that
every tool is documented; rules.md cross-references fixed; bookspec
statuses and loader tightened; viewer notes wrap and accounts sort by
code; STATUS.md says P3 is built, cutover pending.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj

crates/ledger-store/tests/asset_tags.rs

@@ -1175,7 +1175,7 @@ fn reversing_a_linked_acquisition_still_opens_and_verifies() {
     Store::open(&dir).unwrap().verify().unwrap();
 }
 
-// ------------------------------------------------- depreciation runs (rules.md B-24)
+// ------------------------------------------------- depreciation runs (rules.md B-15 rules 6 and 8)
 
 /// A run is the books' record of what they carry for an asset
 /// (Ledger::accumulated_posted): recorded live, replayed from the journal,

crates/ledger-store/tests/store.rs

@@ -3417,7 +3417,7 @@ mod p3_properties {
         })]
 
         /// rules.md B-31 (the engine-side counterpart to the Lean note,
-        /// docs/verification.md 13a): on books with postings, any sequence
+        /// docs/verification.md law 15): on books with postings, any sequence
         /// of renames changes no figure (the ledger's statements, without
         /// names), no entry and no earlier journal line; live equals
         /// replay; the projection equals a fresh one. The sets picked by