feat: preserve full-page launch context

docs/QUICK_ACCESS.md

@@ -37,5 +37,10 @@ owner module.
 
 Quick Access is not an authorization boundary. Every contribution keeps its
 own permission requirements and View surface. Full-page routes remain the
-canonical fallback. Disabling this module removes the rail without making any
-domain state unavailable through its owning module.
+canonical fallback. Launch context version 1 contains only the tenant/account
+identity, safe active-object reference, acting-assignment identifiers,
+temporal selection, exact View identity, and return route. Cross-tenant object
+references are discarded and unknown context versions are ignored. The
+destination reauthorizes every read and effect. Disabling this module removes
+the rail without making any domain state unavailable through its owning
+module.