feat: the shapes of the four hand-written .wikitool-*.json files live in one record each (config_shapes.py); loaders, doctor and docs/reference/configuration.md read them (#193)

The telemetry, remotes, upload and tasks loaders take field names, defaults, coercions and their Expected: text from the record and accept exactly what they did before. doctor WARNs on a telemetry file the policy silently reads differently. configuration.md carries one generated region per file, also checked in an instance. docs reference --apply now refreshes several regions in one page in sequence instead of keeping only the last.

Files changed:
- CHANGES.md
- VERSION
- docs/how-to/set-up-the-mcp-server.md
- docs/reference/README.md
- docs/reference/commands/instance-health.md
- docs/reference/commands/types-instructions-and-docs.md
- docs/reference/configuration.md
- instructions/dev/doc-pull-through.md
- instructions/setup-instance.md
- tools/CONTRACT.md
- tools/README.md
- tools/chemenu/commands/docs_verify.py
- tools/chemenu/commands/doctor.py
- tools/chemenu/commands/git_publish.py
- tools/chemenu/config.py
- tools/chemenu/config_shapes.py
- tools/chemenu/reference_doc.py
- tools/chemenu/tasks/caldav.py
- tools/chemenu/tasks/config.py
- tools/chemenu/tasks/superproductivity.py
- tools/chemenu/telemetry/policy.py
- tools/chemenu/tests/test_config_shapes.py
- tools/chemenu/tests/test_doctor.py
- tools/chemenu/tests/test_reference_doc.py
- tools/chemenu/upload.py

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SnAJ7Z3CpVD3PRbN73QtU2

docs/how-to/set-up-the-mcp-server.md

@@ -161,21 +161,9 @@ reviewed yet.
 ## Optional: the submit path
 
 Without this, `submit` does not exist as a tool - not unused, but not registered. A file
-`.wikitool-upload.json` in the served corpus turns it on:
-
-```json
-{
-  "schema": 1,
-  "identity_header": "X-Forwarded-User",
-  "max_bytes": 10485760,
-  "allowed_extensions": [".md", ".txt", ".pdf", ".html", ".csv", ".json", ".png", ".jpg"],
-  "quota": { "submissions_per_day": 20, "bytes_per_day": 52428800 }
-}
-```
-
-Every field is required, and none has a built-in default except `identity_header`. A malformed file
-stops the server from starting. It never means "no limits": the failure deliberately goes the safe
-way. Size and quota are your deployment's decision, not defaults worth copying blindly.
+`.wikitool-upload.json` in the served corpus turns it on. Its fields, defaults and what a malformed
+file does are in the [configuration reference](../reference/configuration.md#mcp-submissions); a
+broken file never means "no limits", it stops the server from starting.
 
 **With `submit` on, the middleware has a second duty.** It has to set the identity header itself, on
 every authenticated request, and discard any copy the client sent. The server trusts that header as