v0.1.0-alpha.2

Alpha.2 adds portable integrity-checked source snapshots and writable disposable replay workspaces. Generated replay files are tracked and discarded; the original checkout and evidence snapshot remain unchanged. Replay remains offline, non-root, resource-limited, and best-effort redacted.