docs: fix docs references

Author: d-gubert

docs/proposals/apps-accessor-consolidation/README.md

@@ -518,7 +518,7 @@ tests are deleted in that same PR — gated, for MOVE accessors, on the parity c
    positional arg (§5.1). → `base-runtime/src/lib/bridges/RemoteBridges.ts` (+ tests).
 2. ✅ Produce the **APP_ID exception list** (§5.2) — the audited set of `do*` params where the appId
    is an app-supplied argument, not caller identity (known seed: the three `ModerationBridge`
-   methods). → `docs/base-runtime-app-id-exceptions.md`. The audit surfaced a **second** exception
+   methods). → `docs/proposals/apps-accessor-consolidation/base-runtime-app-id-exceptions.md`. The audit surfaced a **second** exception
    category (bucket C): the host's sentinel substitution rewrites only *top-level positional* params,
    so a nested identity field like `Http.doCall`'s payload `appId` cannot use the sentinel and keeps
    the resolved id.

packages/apps/base-runtime/src/lib/accessors/http.ts

@@ -79,7 +79,7 @@ export class Http implements IHttp {
 
 		// `appId` here is a field inside the payload object, not a top-level positional
 		// param, so the host's `'APP_ID'` sentinel substitution cannot reach it - we send
-		// the resolved id. See docs/base-runtime-app-id-exceptions.md (bucket C).
+		// the resolved id. See docs/proposals/apps-accessor-consolidation/base-runtime-app-id-exceptions.md (bucket C).
 		let response = await this.bridges.getHttpBridge().doCall({
 			appId: AppObjectRegistry.get<string>('id'),
 			method,