fix(components): use --step-4 in Callout, flag two untokenized clamps

Same gate-evasion class as CodeBlock/Eyebrow: check-tokens.mjs matches
`font-size: Npx` only, so raw clamp() values pass. All three are verbatim
from styles.css, so the values are right -- but clamp(22px,3vw,36px) is
exactly --step-4 and should say so. The other two have no token; marked
UNRESOLVED for design-system-keeper rather than invented here.

src/components/primitives/Callout.astro

@@ -75,9 +75,12 @@ const { label, tone = 'accent', variant = 'label' } = Astro.props;
      markup uses is set here so the call site can just write <strong>…</strong>. */
   .body :global(strong) {
     max-width: 850px;
-    font-size: clamp(22px, 3vw, 36px);
+    font-size: var(--step-4);
     line-height: 1.1;
   }
+  /* UNRESOLVED — clamp(24px,4vw,46px) is verbatim from `styles.css`, but no
+     token covers it. Needs one from design-system-keeper; see
+     .agents/rules/gates.md on reporting token gaps rather than inventing. */
   .callout.variant-split .body :global(strong) {
     font-size: clamp(24px, 4vw, 46px);
     line-height: 1.05;

src/components/primitives/Rule.astro

@@ -45,6 +45,9 @@ const { label, tone = 'accent' } = Astro.props;
 
   /* The body renders the slot verbatim; the strong treatment that the source
      markup uses is set here so the call site can just write <strong>…</strong>. */
+  /* UNRESOLVED — clamp(24px,3.3vw,42px) is verbatim from `styles.css`, but no
+     token covers it. Needs one from design-system-keeper; see
+     .agents/rules/gates.md on reporting token gaps rather than inventing. */
   .body :global(strong) {
     max-width: 850px;
     font-size: clamp(24px, 3.3vw, 42px);