docs: stale v0.9.1 references after claude-lanes repin to v0.10.2

[kyle-sexton]

Two comments went stale when the claude-lanes pins moved to v0.10.2 (PR: #337):

1. distribution/sync-manifest.yml:35 — still says the lane callers are "pinned at the v0.9.1 release SHA (c136b27; ...)". Pins are now v0.10.2 = e9443874.
2. components/claude-lanes/claude-security-review.yml:20 — describes the paths list as "GitHub Actions paths: patterns, one per line". Upstream v0.10.2 matches root-anchored gitignore patterns via git check-ignore and hard-errors on !, ?, or +. The stale wording invites syntax the lane now rejects.

Both surfaced by the fresh-context merge verifier on #337 (non-blocking, LOW).

[kyle-sexton]

Claiming this docs-only fix (stale v0.9.1 pin comment + paths-file convention). Branch: cursor/docs-claude-lanes-stale-refs-f19e. 🤖

[kyle-sexton]

Lease claim

Claimed for in-session drain (assignee + 24h lease). Implementing now on an isolated worktree/feature branch.

🤖