plans: row 154 brief owns two serve.mjs static routes and round-trips the goals review (Researcher phase 1)

Researcher's phase 1 report needs /editor.js and /editor.css route
entries in serve.mjs, and spec/north-star.md doesn't exist. The brief
now owns those two entries only and names
docs/plans/2026-09-27_goals-review.md for the round-trip test.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

docs/plans/2026-10-16_q168-wysiwyg-editor.md

@@ -42,6 +42,10 @@ unreviewable prebuilt bundles.
   one, with every dependency pinned exactly.
 - Tests in the webui package, the webui browser tests, READMEs and
   `docs/TOOLS.md`.
+- `packages/webui/src/serve.mjs`: only two static route entries,
+  `/editor.js` and `/editor.css`, beside the existing public file
+  entries (Sage, 2026-10-18, on the phase 1 report). No other change
+  there.
 
 The read and save routes, the bus verbs, the human writer and the
 stale-base refusal stay as row 148 built them. If the editor needs a
@@ -86,7 +90,8 @@ change there, the row stops and tells Sage.
      attribute and a `javascript:` link in the Markdown, runs nothing in
      the WYSIWYG view;
    - a test that the editor works under the Console's current CSP;
-   - a round-trip test over `spec/north-star.md` and a doc with every
+   - a round-trip test over `docs/plans/2026-09-27_goals-review.md`
+     (the north star; `spec/north-star.md` doesn't exist) and a doc with every
      element row 148's preview supports;
    - a test that fails if the imported source's tree hash differs from
      the one in the provenance file plus the recorded local changes;