fix(operate): keep starter synthesizers read-only

type "general" maps to a write-capable worker and fails closed without
writeRoots/exactFiles/coordinationContracts. operate_read_audit and
operate_parallel_scout only synthesize scout output — use type "review"
so the starters complete under Operate dogfood.

workflows/operate_parallel_scout.workflow.js

@@ -41,7 +41,9 @@ export default async function () {
   const summary = await task({
     description: "Synthesize from surviving parallel slots",
     label: "synthesizer",
-    type: "general",
+    // Read-only synthesizer — "general" is write-capable and fails closed without
+    // write scope (same class as operate_read_audit; dogfood 2026-07-24).
+    type: "review",
     prompt: [
       "Build one operator-facing summary from the surviving scout results.",
       "Explicitly note which parallel slot failed or returned null.",

workflows/operate_read_audit.workflow.js

@@ -35,10 +35,12 @@ export default async function (args) {
   ]);
 
   phase("Synthesize");
+  // Synthesizer must stay read-only: type "general" is write-capable and
+  // requires writeRoots/exactFiles/coordinationContracts (dogfood 2026-07-24).
   const summary = await task({
     description: "Synthesize audit findings for the operator.",
     label: "audit summary",
-    type: "general",
+    type: "review",
     prompt: [
       "Synthesize a concise security/reliability audit from these scout results.",
       "Filter null/failed scouts. Group by severity. No file edits.",