fieldtest: cycle-241 wiring-only tier — 4 axes, 1 bug + 4 friction + 1 spec_gap + 5 working

Consumer-POV fieldtest evidence for the two-tier project model: the
data-only quickstart, the role-2 attach loop, real-data usage inside a
data-only project, and the refusal surfaces all match the docs.

Inline fixes for two of the friction findings:
- docs/project-layout.md: the day-in-the-life run example now shows real
  Unix-ms window bounds instead of bare years (--from/--to take ms).
- `aura new` --help one-liner no longer calls the project a crate.

Remaining findings tracked on the Gitea queue (empty first-manifest
provenance on a fresh scaffold; misleading no-data message for an
uncovered --real window; the tier hint missing on the graph-build path;
the raw cargo-metadata leak for a missing [nodes] dir).

refs #241

docs/project-layout.md

@@ -145,7 +145,8 @@ command sequences.
 3. **Backtest:** an op-script wiring `ger40_lab_nodes::ThirdCandleLong` (§1,
    `docs/authoring-guide.md`) is built into `blueprints/third-candle-long.json`
    (`aura graph build`); `aura run blueprints/third-candle-long.json --real
-   GER40 --from 2020 --to 2024` → the strategy produces a broker-independent, unsized
+   GER40 --from 1704067200000 --to 1735689600000` (the window bounds are Unix
+   milliseconds — here 2024) → the strategy produces a broker-independent, unsized
    **bias stream** (one signed, bounded `f64 ∈ [-1,+1]` per cycle — sign = direction,
    magnitude = optional conviction). A downstream **risk-based executor** (stop-rule →
    position-management, in **R**, the protective stop defining 1R) turns the bias into