v0.4.6-beta.2

Invitation-protected services can now request marketplace admission through exact signed metadata verification, without giving the marketplace an invitation or executing a canary. Providers still enforce invitations on every call. Open services retain execution checks; private services remain ineligible.

The marketplace and service-link pages distinguish invitation access from execution-check evidence, and generated consumer commands use a credential file. Shared URLs and QR codes contain no invitation credential.

Validation: 684 public Rust tests, 76 publish-engine tests, 164 website tests and the production build; local rendered desktop/mobile and QR checks; a fresh Codex MCP publication/invocation roundtrip. The paired hosted beta.21 adds admission enforcement and durable failed-feed cooldown. Payment rails remain deferred. Clean-machine, Claude Code, and human first-use qualification remain open; this is a prerelease.