v0.13.3

Patch Changes

• abe8af3: bootstrap-windows-worker.ps1 holds no Edge or Node version of its own: it reads edge.version, edge.msiUrl, edge.msiSha256, node.version and node.sha256.{x64,arm64} from control's pins manifest, deploy-pins.json, at C:\a11y\deploy-pins.json (or A11Y_PINS_FILE), with one A11Y_* override per value, and stops naming what to give it when it has neither (it never guesses a version). serve-bootstrap.sh takes the manifest's path as its second argument (before the optional port), refuses a file that is not the fleet's manifest, and serves it as a symlink so an upgrade's edit reaches the next box without a restart; autounattend.xml fetches it with the other files; a11y-bootstrap.service passes it. A caller that started serve-bootstrap.sh <key> <port> must now pass the manifest between them (the script says so and exits 2), an a11y-bootstrap.service installed before this must be replaced, and install media made before this must be refreshed. The irm | iex one-liner needs the manifest (or the A11Y_* values) in place first: with neither it stops at the start, before anything is installed, and says what is missing. Every pin but the Node hash is read before anything is installed, and an x64 box asks for no arm64 hash. This ends the second place the fleet's Edge and Node were written (A11-205).