Repoint ADR references after HQ consolidated 65 records to 23

Comments naming records that no longer exist now point at the consolidated
record holding their reasoning -- the four lab records are 0016, a test defends
a decision is 0017.

src/lifecycle/place.ts

@@ -97,7 +97,7 @@ export interface PlacedHost {
  * Put the host on a machine and ask it what the machine is.
  *
  * The result is read back from the running binary, never assumed from the fact that the copy
- * succeeded (novox/hq ADR 0035). A file arriving is not a host working, which is the same
+ * succeeded (novox/hq ADR 0018). A file arriving is not a host working, which is the same
  * distinction the host itself makes about installed packages.
  */
 export async function placeHost(
@@ -192,7 +192,7 @@ export async function applyPlacements(
  * The base image a scenario's machines are built from, when they need a container runtime.
  *
  * A sealed scenario cannot install one: its segments use documentation ranges and there is no
- * route out (novox/hq ADR 0032). So the runtime arrives the way research 012 says everything
+ * route out (novox/hq ADR 0016). So the runtime arrives the way research 012 says everything
  * awkward should — **fetched at build time on a machine that has a network, applied on a target
  * that then needs nothing.** Building this image is that build time.
  *
@@ -262,7 +262,7 @@ export async function placeImage(
   // sealed machine cannot reach. Measured, not assumed: the load says `Loaded image ID:`
   // instead of `Loaded image:`, and `docker images` then lists nothing.
   //
-  // This collides with novox/hq ADR 0046, which pins bundle images BY DIGEST and has the host
+  // This collides with novox/hq ADR 0006, which pins bundle images BY DIGEST and has the host
   // refuse anything else. Reconciling the two needs a registry inside the scenario, which is
   // real design work — see 04-ISSUES/009.
   if (reference.includes("@sha256:")) {