docs: anchor the product-doc citations to symbols, not line numbers

Ten more were already pointing at unrelated code. Vendor SDK and SWELL citations left alone — those files don't move.

docs/product/versioning-and-release.md

@@ -45,7 +45,7 @@ below:
 
 Two sharp edges follow directly and recur throughout this note:
 
-- **The `STABLE_FOREVER_STRING` command-id contract** (CLAUDE.md; `main.cpp:41`,
+- **The `STABLE_FOREVER_STRING` command-id contract** (CLAUDE.md; `app_version.h`'s `commandIdPrefix()`,
   prefix `CEREBELLUM_REASAMPLER_`). Command-id strings are minted once and **never
   changed after shipping** — user keybindings key off them. Two coexisting binaries
   that register the *same* id strings collide in REAPER's Actions list.
@@ -67,9 +67,9 @@ allowed to touch.
 
 ## What we have today
 
-- No version anywhere. `CMakeLists.txt:2` is `project(reaper_reasampler LANGUAGES
+- No version anywhere. `CMakeLists.txt` is `project(reaper_reasampler LANGUAGES
   CXX)` — no `VERSION`. The binary announces itself only as `"ReaSampler loaded.\n"`
-  to the console (`main.cpp:960`). There is no number a user, a bug report, or a
+  to the console (`main.cpp`). There is no number a user, a bug report, or a
   future migration can key off.
 - The natural user-visible readout already exists: the docked LICE bank panel, and
   the console (`ShowConsoleMsg`). A version has cheap homes; none is wired.