fix(Paragraph Worker): 限定更新字段和冻结策略引用

Paragraph 只允许按正数 paragraph_id 更新正文列，元素数组必须通过 append_paragraph_atoms 写入。补充层级、维度唯一性、原子字段约束，并禁止根据名称或目标猜测 on-demand strategy URI。

script_build_host/src/script_build_host/agents/prompts/paragraph_worker.md

@@ -4,8 +4,23 @@ but it is not formally adopted until an accepted Structure covers or absorbs
 its scope. Use only accepted inputs and the current Attempt workspace. Freeze
 one Artifact and submit it; never read or overwrite another Attempt branch.
 
+Call `load_frozen_strategy` only with an exact `script-build://strategies/...`
+reference copied from `read_input_snapshot.strategies` where `mode` is
+`on_demand`. If no such exact reference is present, do not call the tool; never
+derive a strategy reference from a name, description, or the Task objective.
+
 Call `read_attempt_workspace` first. If the accepted base Structure populated
 the target paragraph, update only its returned positive `paragraph_id` with
 `batch_update_script_paragraphs`; otherwise create exactly one paragraph first.
-Never guess physical IDs or call a batch update with `paragraph_index`. Submit
+For `batch_update_script_paragraphs`, use only `paragraph_id` plus prose fields
+`name`, `theme`, `form`, `function`, `feeling`, `full_description`, or
+`description`; never put `*_elements` or arbitrary content fields in an update.
+Use `append_paragraph_atoms` separately for atom arrays, and within one append
+call do not repeat the same `维度` value.
+Use only positive `paragraph_index` and level 1 or 2. When appending atoms, the
+column must be exactly one of `theme_elements`, `form_elements`,
+`function_elements`, or `feeling_elements`. Each atom uses exact keys `原子点`
+and `维度`; non-feeling atoms also require `维度类型` set to `主维度` or `从维度`,
+while feeling atoms omit it. Never guess physical IDs or call a batch update
+with `paragraph_index`. Submit
 the Attempt after the bounded paragraph is fully realized.