cto-legends 0.2.1: reliable discovery refresh

The single generic cto-legends skill stays unchanged. This release improves
the manager behind it and includes catalog 1.0.3 with legends-empire 0.2.0.

• sync previews and refreshes existing unedited startup indexes and blocks.
  It preserves human edits, reports repair residuals and supports rollback.
• Handoff distinguishes installed and available versions and loads the correct
  installed instructions. It no longer treats a newer catalog as proof that
  the corresponding capability is already installed.
• Ordinary vault-cleanup, neglected-project and session-continuity requests
  discover stewardship inside Empire. No second module or skill is required.
• The module knowledge contract explains optional Markdown pack attachment,
  ownership and safe updates. Router stability explicitly permits necessary
  fixes and versioned improvements.

Install or upgrade the attached wheel, then run cto-legends sync --apply.
Preview cto-legends install legends-empire and apply when authorized.
Reload the agent host after startup changes. Existing managers can sync the
catalog, but need explicit startup refresh unless upgraded to this version.

Validation: 156 offline tests, six Windows/macOS/Linux CI configurations,
public catalog contract, clean-home install, startup refresh, doctor and handoff.
Two local Windows symlink tests were skipped for platform privilege limits.

A fresh isolated Codex session advertised only the central skill and attempted
the expected discovery reads, but its host execution policy blocked those reads.
That run is recorded as blocked, not full automatic-agent acceptance. CLI and
package acceptance passed independently; host-specific loading still requires
verification in the user's environment.

Source: dace1edb8534cb4494e60066ec88cb12470c61ae.
Wheel SHA-256: 93bd0c6ffe4dbcf6f625abea8c9cfe5996d2b184ff692797cba9b097727b9ae0.