Pinable runtime 20261019024155-40cfa1cd50bd

Pinable Desktop portable runtime, source 40cfa1cd50bdfb1f47f1199221645610bb44cadb.

All six platform executables passed native host-contract smoke checks. Normal Go regression tests passed before publication.

Use runtime-index.json and SHA256SUMS to approve exact binary hashes in Desktop's component lock. No lock is changed automatically. CGO=0 disables the Unix dynamic-library loader; Windows retains its DLL loader. Plugin execution is not certified by this pipeline. macOS binaries are ad-hoc signed, not Developer ID signed/notarized; Windows binaries are unsigned. This is not a Desktop application installer.