v0.9.1

• Managed Whisper setup now installs the pinned 1.9.2 runtime even when its shared-library symlinks appear before their targets in the archive.
• Extraction validates the complete selected symlink graph, including cycles, missing targets, escapes, and flattened destination mismatches, before any staged link can reach activation.
• CI downloads the exact pinned Whisper archive and drives it through digest verification, extraction, payload verification, the real Linux runtime probe, immutable activation, receipt checks, and post-install Verify.