v3.0.2 - Final one-shot deep audit: 8 lenses, a critical bypass closed

One final, maximally-deep single-round audit (8 parallel specialist lenses covering security, integrity hooks, role-consistency, comprehension/docs, lifecycle, packaging/CI, AI-safety, and whole-product coherence) on top of v3.0.1. 7 of 8 lenses found real issues; the most serious was a critical, live bypass in the prior release's own push-safety fix, rooted in how bash expands a declaration keyword's own arguments (export/declare/readonly/typeset) differently from a bare variable assignment -- reproduced end-to-end and closed. Also disabled Dependabot going forward (no history rewrite), fixed several documentation/consistency drifts, and closed two small AI-safety hardening gaps. See CHANGELOG.md for full detail on every fix.