Golden WSL2 image v19 (adom-cli 0.5.12)

Golden WSL2 image v19 — adom-cli 0.5.12 (HD-local proxy fix).

Required change from v18: bakes adom-cli 0.5.12, which adds the ~/.adom/hd-proxy-url base-url fallback (adom-inc/adom-cli PR #9) so adom-cli works in env-less non-login shells inside HD local workspaces. v18 shipped 0.5.11, which fell back to the real carbon.adom.inc and 404'd.

Verified in-image before packaging:

• adom-cli --version → 0.5.12
• the hd-proxy-url literal is present in /usr/local/bin/adom-cli (checked with LC_ALL=C grep -qa; note plain grep -q false-negatives on this binary, and strings isn't in the image since binutils was stripped in v15)
• /etc/adom-golden-version → v19

⚠️ The 0.5.12 binary is built from source (fix/hd-local-proxy-discovery, Ubuntu 24.04 / glibc 2.39) and overlaid, because the registry's adom/adom-cli package still ships 0.5.11. It is not registry-tracked — once a package carrying 0.5.12+ is published, the normal adom-wiki pkg update path takes over and the bake's overlay block should be deleted.

Also in this image (registry drift since v18 — resolved-latest, not requested):

• adom/hd-bootstrap 0.2.10 → 0.2.23, adom/hd-windows-bootstrap 0.2.6 → 0.2.8, adom/core 4.13.1 → 4.13.2
• hd-* skills 49 → 51 (new: hd-demo-recording, hd-editor-state)
• Both bootstraps are the first published on scripts.install (migrated from the deprecated scripts.postinstall); adom-wiki 1.0.45 runs them in dependency order with no shim.

Build hygiene: the bake now fetches the adom-wiki CLI fresh at bake time (never a staged/pinned copy) — a stale pinned 1.0.41 caused a false bug report during v19 development.

Size: 456.5 MB compressed (478,672,029 bytes).
sha256: c5e54555b6ecd3ea5c88af7a65de77aa6af675405f5b19b14f2e6c8fc8ece3b5 (also attached as .sha256)

HD must bump the pin: src-tauri/crates/hd-app/src/runtime/wsl.rs hardcodes the tarball name/URL/sha/version (currently v18) — a one-line-per-const change plus a rebuild is required for HD to actually pull v19.