v1.4.1 — interaction labels + capability routing

Deltas D2 and D3.

Interaction labels v1 (hotato.interaction-label.v1): optional, backwards-compatible metadata about one event — speech_presence, addressed_to_agent, floor_intent, label_authority, label_ref. Every field is supplied by a human, a trusted source, or a marked fixture; Hotato never derives addressee or turn intent from timing, energy, transcript, or a model verdict. An event with no label reads as all-unknown, so existing artifacts stay valid.

Capability routing v1 (hotato.capability-requirement.v1): a pure, deterministic router that reads supplied interaction labels on a paired addressee-control battery and routes to the narrowest capability the paired evidence supports (a missed addressed floor bid plus a false trigger on the opposite risk), or to no recommendation at all. It never infers addressee or intent, never reads audio, names no vendor, and emits a provider-neutral verdict. Insufficient or untrusted labels route to engagement_control with the missing axes listed.

Also: the consumer GitHub Action hardened to install and gate on itself (--no-deps self-install, action-consumer conformance fixture, action-smoke CI job).

Full suite 2912 passed. See CHANGELOG.md.