Excess Worker 0.2.3

Release sequence 32. Anonymous Minisign release signing. Windows executables have no trusted Authenticode publisher signature.

Changes since 0.2.2: the worker status now records why the last job failed or was cancelled (lastJobFailure: job and attempt IDs, outcome and a fixed reason code). Error messages are never recorded, because they can quote prompts, outputs, paths or responses.

Windows CPU/CUDA: the eight release-gate routes passed, plus Phi-4-mini, Qwen3-8B and Llama 3.1 8B on CPU and CUDA, and Phi-4, Qwen3-14B and gpt-oss-20b on CPU. Linux CPU (WSL2): Qwen3-4B, Qwen3-8B and Qwen3-14B passed. See docs/verification/candidate31-other-models.md.

Linux NVIDIA CUDA: the signed 0.2.3 candidate, with the same worker payload as this release, ran actual buyer jobs for all 17 pinned local catalogue models on one recorded NVIDIA B300 configuration (driver 580.178.04, CUDA 12.9). Drain, restart, revocation and cleanup passed there. Cancelled text, image, transcription and embedding jobs ended with no charge; the runtime monitor recorded the runtime stopping for transcription and embedding only. GPU memory budgets are sampled whole-device limits, not hard partitions. Other GPUs, drivers and distributions are unverified. See docs/verification/linux-b300-cuda-sequence31.md.

Updating: Windows and Linux 0.2.2 installations update with excess-worker update after draining. See docs/INSTALLATION.md ("Stop, revoke and update").