0.22.0

Added

• Bindings accept delivery: at_most_once for one attempt without redelivery. Loss remains
  possible, and the guarantee does not impose an idempotency obligation on the handler.
• OpenAPI requires Idempotency-Key only for commands invoked by an at_least_once binding.
  AsyncAPI, documentation, graph and browser projections describe both delivery guarantees.
• Conformance records BindingGap::DeliverySingleAttempt instead of synthesizing a redelivery
  for an at_most_once binding. Existing at_least_once scenarios remain unchanged.
• BindingChange::DeliveryChanged reports changes between delivery guarantees. The published
  schema admits the new value; the format remains ess/1, with existing IR and digests unchanged.

Changed

• Common source security and privacy checks use pinned public Gates tooling and
  signed local evidence. Bot delivery no longer requires an Atlas checkout.
• The repository test runner declares the same compiler and wrapper profile as
  consumer qualification, so the compiled-provider regression runs with admissible evidence.
• Consumer checks refuse drift in the ESS evolution preservation mapping before running
  expensive extraction and behavioral cases. Existing semantic eligibility remains unchanged.
• CI disables the consumer-check lane by explicit operator request. Local task check
  and task consumer-check retain the complete consumer coverage exercise.

This source release was published without running gates, tests or binary packaging.