fix: merge-time follow-ups for #409, #404 and #399

#409 (Claude truecolor). The changeset becomes the changelog, and its premise
does not hold on tmux 3.2 or newer. Measured here on tmux 3.4: `default-terminal`
sits at its compiled default of `tmux-256color`, a live claude pane reports
`TERM=tmux-256color`, and supports-color reads that as 256 colors, where
rgb(55,55,55) lands on ESC[48;5;237m — visible, just not the color the theme
named. The invisible block the PR describes needs TERM to resolve to a 16-color
entry: tmux older than 3.2, or a ~/.tmux.conf setting `default-terminal screen`,
which Codeman's own tmux server does read (it passes no -f). Both the changeset
and the invariants paragraph now say that, so the next report here gets paired
with the reporter's tmux -V instead of being read as universal. The change itself
stands on the simpler argument: claude was one of two entries not asking for
truecolor while twelve do.

Also reorders buildClaudeEnv(). It applied the registry's unset/exports AFTER the
whole env was built, so a clis.json entry naming CODEMAN_HOOK_SECRET_FILE or PATH
would strip it on the direct-PTY path while the tmux pane kept it — buildEnvExports()
emits `...cliEnv` ahead of `export CODEMAN_MUX=1` and cannot. The block now runs
first and Codeman's own keys are assigned on top, matching the pane.

#404 (Ctrl+Z trap). Adds the missing changeset, and records what the trap does
not cover: an agent CLI already holds its tty with ISIG off (verified on three
live panes: `susp = ^Z -isig -icanon`), so this is defence for the startup window
rather than a fix for the steady state, and two input paths still reach the PTY
unfiltered — the mobile accessory bar's one-shot Ctrl and the CJK textarea.

#399 (path picker sort). The server sorts by name and cuts at 500, so the client
sorting those 500 by date gives "the newest of the first 500 by name", which is
wrong in exactly the >500-entry folder the date sort exists for. The status line
now says "(first 500 by name)" so the cut is legible, with the reasoning parked
on _sortEntries.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

src/session-cli-builder.ts

@@ -170,21 +170,17 @@ export function buildClaudeEnv(sessionId: string): Record<string, string | undef
     ...process.env,
     LANG: 'en_US.UTF-8',
     LC_ALL: 'en_US.UTF-8',
-    PATH: getAugmentedPath(),
-    TERM: 'xterm-256color',
-    // Inform Claude it's running within Codeman (helps prevent self-termination)
-    CODEMAN_MUX: '1',
-    CODEMAN_SESSION_ID: sessionId,
-    // CODEMAN_API_URL rides in via the process.env spread when the server has
-    // stamped it (WebServer.start()); no fallback: a hardcoded one was the wrong
-    // scheme on HTTPS installs, and a present-with-undefined key would serialize
-    // as the literal "CODEMAN_API_URL=undefined" (COD-115).
-    // Path only (not the secret value) — hook curls cat it at execution time (COD-54)
-    CODEMAN_HOOK_SECRET_FILE: dataPath('hook-secret'),
   };
+
   // The colour and identity vars come from the registry entry, the same source
   // buildEnvExports() and buildMuxAttachEnv() read, so this fallback cannot drift from
   // the tmux pane the way a hand-maintained list here did.
+  // ⚠️ This block runs BEFORE Codeman's own keys are assigned, mirroring
+  // buildEnvExports(), where `...cliEnv` is emitted ahead of `export CODEMAN_MUX=1`.
+  // Applied afterwards it would outrank them: `unset` and `exports` are config
+  // (`~/.codeman/clis.json` overrides any entry), so an entry naming
+  // CODEMAN_HOOK_SECRET_FILE or PATH would strip or rewrite it on this path while the
+  // tmux pane, where Codeman's exports come last, kept its own value.
   // COD-115: `delete`, not `= undefined` — node-pty serializes a present-with-undefined
   // key as the literal string "KEY=undefined" (see buildMuxAttachEnv below).
   const cliEnv = getCli('claude')?.env;
@@ -202,6 +198,20 @@ export function buildClaudeEnv(sessionId: string): Record<string, string | undef
             : undefined;
     if (value !== undefined) env[item.name] = value;
   }
+
+  Object.assign(env, {
+    PATH: getAugmentedPath(),
+    TERM: 'xterm-256color',
+    // Inform Claude it's running within Codeman (helps prevent self-termination)
+    CODEMAN_MUX: '1',
+    CODEMAN_SESSION_ID: sessionId,
+    // CODEMAN_API_URL rides in via the process.env spread when the server has
+    // stamped it (WebServer.start()); no fallback: a hardcoded one was the wrong
+    // scheme on HTTPS installs, and a present-with-undefined key would serialize
+    // as the literal "CODEMAN_API_URL=undefined" (COD-115).
+    // Path only (not the secret value) — hook curls cat it at execution time (COD-54)
+    CODEMAN_HOOK_SECRET_FILE: dataPath('hook-secret'),
+  });
   return env;
 }