1.62.0 — hardening after the audit

Withdrawn rulings can no longer come back into force unseen (A1); agent.py store-check replays the store through the append rules (A2); a renamed item no longer blocks the fold (A3); the tunnel unit is no longer bound to the console, and build_zip warns on an unscanned zip (A4); docs and the lane process (A5, B1, B6, E1). Full notes: CHANGELOG.md, "Hardening after the audit (1.62.0)". PR #197.