Sandbox doctor runs repaired lock state in a worktree, but base main kept stale lock entries and stayed degraded. This change syncs the repaired lock registry back to the protected workspace and tightens completion language from 'musafe' to 'safe'.

Constraint: Protected main must stay read-only for direct maintenance writes

Rejected: Force in-place doctor writes on main | violates protected-base workflow

Confidence: high

Scope-risk: moderate

Reversibility: clean

Directive: Keep doctor JSON output machine-readable when adding new completion metadata

Tested: node --check bin/multiagent-safety.js; node --test test/metadata.test.js; manual doctor->scan on /home/deadpool/Documents/multiagent-safety

Not-tested: full npm test (existing file-level failures in test/install.test.js and test/fuzzing.test.js)