First BlueDot-IT v0.5 release of the bounded Plan/Apply maintainer control plane. Includes fail-closed OAuth preflight, durable one-shot command consumption, exact-head merge gates, bounded target discovery, and current action documentation. Verified by the passing main workflow at f9b37eb.