Bring the documentation and the docblocks back in line with the code

Problem

A file-by-file audit found these statements that the code no longer bears out. None of them changes behavior, so they are gathered in one task.

• docs/roadmap.md, the Domain tenancy entry: "Each domain is bound to a tenant (a third-party setting on the domain record, edited on the domain form)". The binding lives on the tenant (its Domains form), and the submodule README says a domain record holds nothing of Orchestra's.
• docs/roadmap.md, the audit log entry: "the same event is the spine the notifications feature reuses". Notifications never ride the audit event; the notifications page and the code both say so.
• docs/roadmap.md, the Views entry: "three ready-made dashboards (processes, tokens, inbox)". The Views page lists six.
• docs/tokens.md, Safety: "In the message interaction the result is then filtered as admin HTML". The message interaction renders through the restricted HTML format when it is installed, and falls back to admin HTML only when it is not.
• src/ProcessInstanceInterface::getInitiatorId(): "a subprocess inherits its parent's". Since the initiator source setting that is one of three choices.
• src/OperationInterface: "rather than being pushed to the inbox as a work item ... inbox task types (which create a work item) never appear there". Every human node mints a work item today; its mode decides which surface lists it.
• MessageInteractionTest class docblock and ExternalInteractionNodeFeatureTest::testMessageRichTextFlattenedToString: "filtered as admin HTML on output", the same slip as the tokens page.

Proposed resolution

Reword each in place. Prose only, so no test is added.

AI disclosure: this issue was drafted by Claude Code from an automated file-by-file audit of the module; the changes in the merge request are written by Claude Code and the project pipeline runs the suite. The maintainer reviews and merges.