errorlog lint follow-ups: bitdefender log-gap fix + submodule memory + Windows CORE rules

- bitdefender gz.py: add "missing name" to _EXPECTED_ERROR_MARKERS — closes the last gap in
  Howard's errorlog suppression ("Missing name 'X' in 'options' object" validation errors were
  still logged). Verified all 10 real spam messages now suppressed; genuine errors still log.
- memory feedback_submodule_autosync_discipline: capture the recurring auto-synced-submodule
  rule (worktree or push-by-SHA + ls-remote verify; assert HEAD==origin/main before audits;
  never checkout-- shared files). Recurred on Howard-Home x3 + GURU-5070 this session.
- CLAUDE.md CORE Windows bullet: promote the two top recurring mechanical traps (/tmp path
  mismatch, curl.exe/plink quote-stripping) to always-loaded hard rules so they stop repeating.

Lint of errorlog.md: bitdefender expected-validation spam was ~70% of entries (Howard's
suppression now complete); fabb3421/Mail.Send drift closed earlier this session; wiki-compile
lock-release doc already fixed (entries predate the fix).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.claude/CLAUDE.md

@@ -48,7 +48,12 @@ production, data-loss. Detail: EXTENDED + `.claude/OLLAMA.md`.
 - **Log preventable friction too (`--friction`):** any time you waste tokens on a preventable, repeatable self-inflicted error — harness/env/tool misuse (Git-Bash `/tmp` path mismatch, shell env not persisting between Bash calls, passing huge args on the command line, PowerShell var case-collisions, etc.) — log it: `bash .claude/scripts/log-skill-error.sh "<context e.g. bash/env>" "what wasted tokens + the fix" --friction [--context "ref=<memory-or-rule>"]`. **If it repeats something already in memory or CLAUDE.md, that's the highest-value entry** — it means a rule/memory isn't working; cite the ref. This log is the corpus we lint to build better CLAUDE.md rules and to clean stale/misleading memory. Goal: stop paying twice for the same mistake.
 - **Windows:** ensure `bash` resolves to Git-for-Windows MSYS bash, not the WSL stub; write
   `.claude/current-mode` with a relative/forward-slash path only (never a backslash Windows
-  path). Detail + fixes: EXTENDED.
+  path). **Never write API/scratch JSON to `/tmp`** — Git-Bash `/tmp` and the Write/Python tools
+  resolve it to different places (read-back fails); use a repo-relative path (`./.x.json`). **Never
+  embed `"` in `curl.exe`/`plink` args from PowerShell** — `CommandLineToArgvW` strips them and
+  silently mangles the payload; single-quote bodies, build `$` from `[char]36`, or use SSH key auth.
+  These two recur fleet-wide (errorlog) — treat as hard rules. Detail + fixes: EXTENDED,
+  memories `feedback_tmp_path_windows` + `feedback_windows_quote_stripping`.
 
 ## Coordination (live source of truth)
 The coord API (`http://172.16.3.30:8001/api/coord`, no auth) holds live locks, messages,