Upgrade Oracle compatibility to 0.17.3

[1Morganmore]

Summary

• promote exact @steipete/oracle 0.17.3 npm dist for new runs and retain 0.17.2 as exact-recovery-only
• rebase all eight hash-gated browser compatibility patches while preserving upstream placeholder, reattach cookie-sync, Japanese picker, and explicit headless fixes
• bump codexpro-automation to 1.8.1, update upload-artifact to v7, and synchronize installer, doctor, runtime skills, notices, and bilingual docs

Verification

• python scripts/run_release_contract_tests.py --full (696 passed, 7 skipped)
• python scripts/run_fast_gate.py (167 passed, 1 skipped)
• python scripts/run_golden_path_smoke.py (ok; dry-run, no submission)
• python scripts/check_upstream.py --format json (Oracle/DevSpace/parent CURRENT)
• exact npm 0.17.3 package: all eight patches applied, hash-verified, reverse-verified by review, and idempotent on installed cache
• native assistant placeholder predicate retained substantive answers while classifying exact browser chrome
• durable install receipt v4 for manifest 1.8.1; doctor PASS; Oracle 0.17.3 and DevSpace 1.0.7 read back

Environment

• host Node.js LTS upgraded from 24.17.0 to 24.19.0; bundled npm 12.0.2 is registry latest and satisfies Node engines
• project Python requirements are current and pip check reports no broken requirements

[1Morganmore]

Verification PASS for head 4ede7b9. Full release contract: 696 passed, 7 skipped. Fast gate: 167 passed, 1 skipped. Golden-path dry-run: all checks passed, no question submitted. Live upstream drift: Oracle 0.17.3, DevSpace 1.0.7, and parent donor all CURRENT. Exact registry Oracle package accepted all eight local patches and a second application reported all eight already_patched; native placeholder predicate returned placeholder=true, substantive answer=false, object-shaped placeholder=true. Durable install receipt codexpro.install-receipt/v4 recorded manifest 1.8.1 and doctor returned PASS with @steipete/oracle@0.17.3.

[1Morganmore]

Review correction and final local verification for head 6799bfe:\n\n- Preserved exact Oracle 0.17.2 pre-submit failure settlement after the 0.17.3 active-version promotion by binding each proof to explicit compatible runtime versions; 0.16.1-0.17.1 and unknown versions remain fail-closed.\n- Rebuilt doctor readback authority around the newest v4 receipt, completed v3 WAL, current manifest version/file set, installed/source/backup SHA-256 values, safe path ownership, and exact literal Oracle version/package bindings. Any failed gate now reports FAIL and suppresses the Oracle readback object.\n- Review verdicts: Doctor authority re-review PASS; recovery-version re-review PASS; final silent-failure-oriented code review PASS with no HIGH/MEDIUM findings.\n- Full release contract: 727 passed, 7 skipped in 17:25.\n- Fast gate: 167 passed, 1 skipped; within 60s budget.\n- Golden-path dry-run: PASS, all checks, no question submitted.\n- Release packaging: 11 passed.\n- Current upstream drift: Oracle 0.17.3 and DevSpace 1.0.7 both CURRENT.

[1Morganmore]

Portable CI follow-up for head d0152ca:

Both Windows portable jobs on 6799bfe reached the same single test-only failure: the fixture path used the runner's RUNNER~1 8.3 alias while doctor.ps1 emitted the canonical runneradmin path for the same state file. The raw-string containment assertion therefore failed despite a valid PASS readback. Production behavior was unaffected.

The test now compares existing-file identity with Path.samefile(). Focused install -> doctor -> rollback verification passes locally: 1 passed in 2:15. New CI is running on d0152ca.

[1Morganmore]

Merged and deployed verification:

• Merge commit: ee8c0a2.
• Post-merge main CI: release-portability run 31771004796 PASS; posix-process-gate PASS and Windows portable PASS (14m43s).
• Installed from merged main into the active Orca CODEX_HOME: 122 files; v4 receipt codexpro-automation-20260814-044850123-6fafa888918841adbc0745ba93d21080.json.
• Authoritative doctor readback against that CODEX_HOME: PASS, no issues/warnings, manifest 1.8.1, Oracle @steipete/oracle@0.17.3, DevSpace @waishnav/devspace tested version 1.0.7.
• Task-owned local worktree and local/remote PR branch removed.