Add advisory generated-code smell signals

[geldmacher]

Summary

• Adds five advisory generated-code smell signals to the existing design-and-code simplicity review: branching load, file cohesion, dead or redundant surface, type and error escape hatches, and weak verification theater.
• Treats them as evidence cues during an explicit simplicity review, or when the quick ladder identifies material complexity risk. A finding still needs a concrete location and a safer in-scope alternative. Line and file count remain non-proxies for simplicity.
• Does not add a skill, hook, CLI dependency, or numeric gate (no cyclomatic-complexity ceiling, line-count ceiling, 100% coverage, or mutation score).
• Bumps the plugin patch version from 3.4.1 to 3.4.2 in the portable, Cursor, and Codex manifests, package metadata, lockfile, and the installation checksum examples.

Test plan

• npm run check:targets
• npm run validate
• npm run check:links
• npm test (100 passing)