support: clarify TOS path, add Invoke via Bash + Gotchas, reformat TRIGGER
Clarify that tos.txt lives at <journal_root>/apps/support/portal/tos.txt
(resolved via journal app storage) to remove any ambiguity about source
tree vs. runtime location. Reformat TRIGGER into playbook style with
task-intent dash prefix + literal command list. Add Invoke via Bash line
and a Gotchas section (KB-first on create, --product default, diagnostic
leakage, attachment ordering).
Part of skills audit req_loq3e2lk pass 1+2.