Fix remaining stable PowerShell design cases

[Aaronontheweb]

Summary

• expose bounded foreach dynamic command identities as incomplete occurrences while preserving finite loop-variable values
• fail atomically for the proved invalid local Invoke-Command plus AsJob parameter set
• promote the final stable PowerShell design cases into the generated 540-entry corpus
• close stable design-promotion and PowerShell adversarial-loop OpenSpec tasks

Security behavior

Dynamic identities never become authorization evidence and invalidate subsequent state. Prior uncertainty still prevents loop-value promotion. Unproved receivers and Windows PowerShell 5.1 remain conservative rather than borrowing PowerShell 7 parameter metadata.

Validation

• Release build: 0 warnings, 0 errors
• full tests: 2,867 passed
• focused corpus/design/oracle: 858 passed
• copyright headers: passed
• strict OpenSpec validation: passed
• strict Slopwatch: 0 findings
• adversarial review: PASS, including final re-review after strengthening the pre-loop uncertainty regression
• native PowerShell 7.6.4 confirms the local Invoke-Command plus AsJob shape fails parameter-set resolution