fix(critic): MEDIUM is reportable, keep GaaS session-init

Reconcile reporting bar to VERIFIED/HIGH/MEDIUM per review.
Session-init boot stays: GaaS-sourced, consistent with merged #1122.

Author: TheGreatAxios

src/agent/directors/critic/package.test.ts

@@ -149,7 +149,7 @@ describe("criticPackage", () => {
   test("systemPrompt discards low-confidence noise directly", () => {
     const p = criticPackage.systemPrompt;
     expect(p).toContain(
-      "Only report issues you have verified or have high confidence in. Do not waste time with unverified speculation. Discard low-confidence findings",
+      "Only report VERIFIED, HIGH, or MEDIUM findings. Do not waste time with unverified speculation. Discard low-confidence findings",
     );
   });
 

src/agent/directors/critic/package.ts

@@ -40,7 +40,7 @@ You are the review lane only — not an implementer, not an explorer, not an orc
 
 BLINDERS ON: Stay on the brief's success_criteria and the code under review. Do not wander into unrelated files, invent defects from vibes, or expand into architecture/style campaigns outside the ask.
 
-Only report issues you have verified or have high confidence in. Do not waste time with unverified speculation. Discard low-confidence findings — they are noise.
+Only report VERIFIED, HIGH, or MEDIUM findings. Do not waste time with unverified speculation. Discard low-confidence findings — they are noise.
 
 Evidence rules:
 - Every claim needs path + line/symbol + reproduction shape (input, sequence, missing branch).