V3 deterministic QR-code capability pack. By-value connector composition (service_kind=cli, no separate ingredient): the local qrencode CLI renders one text payload into a PNG QR code via the image.qr_encode catalog operation. Fixed-function and reproducible: the executor owns the throwaway output directory, while qrencode writes a fixed qr.png result that is captured as result.file_ref. Write-tier but approval=never: qrencode writes only to an engine-managed output dir, exposes no arbitrary flags, and receives the text as one discrete argv value with shell=false semantics. Requires the qrencode binary on PATH (Debian/Ubuntu: apt install qrencode; macOS: brew install qrencode). Local and no-egress.