Q-W0 code-review remediation: pitch_shift follower self-heal, T3-03 rate bail, doc/comment riders

src/provenance.cpp

@@ -140,6 +140,9 @@ public:
 
 private:
     bool fail() { ok_ = false; return false; }
+    // TODO(Q-W1): strtol does not check errno/range here, so an out-of-range field narrows
+    // silently to LONG_MAX (then truncates into `int`) instead of failing parse. Flagged for
+    // the Q-W1 wire-codec collapse rather than fixed in place.
     static bool toInt(const std::string& f, int& out) {
         const char* b = f.c_str();
         char* end = nullptr;