Patch release fixing the anonymous reviewer-artifact builder:
- avoids the reserved PowerShell HOME variable;
- excludes the builder itself from reviewer artifacts;
- preserves UTF-8 TOML files without a BOM;
- stores the oracle key separately from the frozen holdout;
- strengthens identity-leak and reproducibility checks.
No benchmark data, defence semantics, model predictions, or reported experimental results changed.