v0.2.37

• Two risk worklists rendered above the ranked list: Change frontier (changing fast, unproven) and Irreversible (can destroy data, unproven), both derived from the one unchanged ranking; rows jump to their ranked card
• User-level risk config at ~/.orangepro/config.json applied first, overridden per key by the repo's .orangepro/config.json; the merged config is hashed into report provenance