style(no-slop): remove every em-dash + banned words across all modules + capstone

Apply the no-ai-slop standard (now binding in AGENTS.md): the em-dash character is
banned outright (restructured, not blind-replaced), plus the banned word/phrase
list (delve, leverage, robust, seamless, truly, unlock, etc.). 0 em-dashes remain
in modules + capstone; the only "robust" left is the planted M10 ai-change.patch
trap. Module H1 titles use a colon separator.

All deliberate teaching devices preserved; labs compile/parse (py/sh/yaml/json);
no junk. AGENTS.md updated with the hard no-slop rules.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TfzV5QvtPDz8LJS3Pu5VLT

modules/18-continuous-delivery-and-deployment/lab/cd-starter.yml

@@ -1,4 +1,4 @@
-# Starter CD pipeline for the tasks-app — GitHub Actions flavor, extending the Module 14 CI file.
+# Starter CD pipeline for the tasks-app: GitHub Actions flavor, extending the Module 14 CI file.
 #
 # The whole idea: CD is not a new system. It is MORE STAGES on the SAME pipeline, after the checks
 # pass. The lint/test gates below are the Module 14 pipeline, unchanged. Everything from the
@@ -6,7 +6,7 @@
 #
 # Where this file goes: .github/workflows/cd.yml (or fold it into your existing ci.yml). On GitLab,
 # the same shape is stages in .gitlab-ci.yml with `needs:`/`rules:`; Forgejo/Gitea use Actions-
-# compatible YAML. The concept — gated stages from merge to running — is identical everywhere.
+# compatible YAML. The concept (gated stages from merge to running) is identical everywhere.
 #
 # VERIFY BEFORE PUBLISH: action versions, the registry login/build-push action names, and the
 # manual-approval mechanism all drift. Check current forge docs at build time (see README checklist).
@@ -41,7 +41,7 @@ jobs:
       - uses: actions/checkout@v7
 
       # Log in to your container registry (Module 16's images need a durable home, like a Git remote
-      # is for commits). Registry/credentials are provider-specific — supply them as secrets,
+      # is for commits). Registry/credentials are provider-specific; supply them as secrets,
       # never inline (Module 17).
       # - uses: docker/login-action@v3
       #   with: