Enforce discussion as a read-only capability

Directive discussion uses the ordinary base system role under a dedicated read-only capability preset rather than a discussion persona. The capability ceiling applies to direct tools, Bash and Eval behavior, and delegated work, so implementation-capable agents cannot bypass it; prompt wording is not the safety mechanism. This keeps Discuss distinct from Implement because their authority differs, while avoiding another behavioral system role.