0.4.3 — recall harness + gh-release-asset fix

Two false-positive/UX fixes plus the recall measurement harness.

Fixed

• gh release delete-asset no longer false-blocks — deleting a re-uploadable release asset isn't the same class as deleting a release/repo/secret. (This one false-blocked while cutting this very release, on the pre-0.4.3 hook — a real veto story.)
• scripts/recall_danger_axis.py runs with a bare pip install gate-cat — the shared danger catalog imported HuggingFace datasets at module top and crashed the dataset-free recall check with ModuleNotFoundError. That import is now lazy.

Added — recall, measured two ways against the full 6-stage gate

• python scripts/recall_danger_axis.py → 43/43 known danger classes neutralized, 0 false-blocks on benign twins. Deterministic, no datasets, runs in seconds.
• 1,085,159 unique real agent commands streamed from five public trajectory datasets → 0 real recall misses (the 4 catalog-flagged allows are disposable-artifact cleanups the gate correctly permits; the same shape blocks on a real target). Artifact: results/million_recall_2026-07-08.json, method in RECALL.md, numbers in FACTS.md (F1a/F1b).

PyPI: https://pypi.org/project/gate.cat/0.4.3/