fix(docs): correct ollama delegate paths

[canoo]

Summary

• Correct stale ollama-delegate.sh references from tools/utilities/ and scripts/ to the current tools/automation/ path.
• Correct the pipeline prompt so L1 task delegation uses the script's actual <task-type> <context-file> arguments instead of passing OLLAMA_HOST_URL as an argument.

Security branch audit

Audited origin/release/v0.1.6-security-fixes against current main.

Already present on main in current form:

• Installer downloads binaries to a temp file before checksum verification.
• Installer temp binary is created in INSTALL_DIR for atomic move behavior.
• Installer cleanup trap is present.
• MCP string inputs have .max(500000) bounds.
• TUI self-update downloads install.sh from the versioned release tag and verifies it against checksums.txt before execution.
• TUI update tag validation and positional shell argument handling are present.
• TUI update error output is captured and surfaced.
• .goreleaser.yml includes install.sh in release checksums.

Skipped as obsolete:

• The old demo.yml PAT removal commit, because demo.yml no longer exists on main.

Remaining actionable item:

• Stale docs/instruction paths for ollama-delegate.sh, fixed in this PR.

Validation

• rg -n 'tools/utilities/ollama-delegate|scripts/ollama-delegate|OLLAMA_HOST_URL.*task_description' core tools README.md docs personas prompts tests returned no matches.
• git diff --check -- core/NEXUS.md core/kiro-nexus-steering.md tools/automation/run-pipeline.sh passed.
• docker run --rm -v "${PWD}:/repo" -w /repo koalaman/shellcheck:stable tools/automation/run-pipeline.sh passed.