Across Orchestrator v0.12.0

Goal Contract v1 revalidation becomes an explicit plan/start/complete protocol with authoritative terminal and evidence receipts. This release also aligns Worker and relay distribution metadata, strengthens stale-attempt fencing, and resolves the remaining CodeQL test-quality findings. Validated with 359 tests, 14 subtests, package smoke, installed AAA provider/consumer acceptance, a real remote Worker completion, reconnect after lifecycle repair, and late-result quarantine.