Across Orchestrator v0.12.1

Patch release preserving ordinary task protocol identities during public sanitization so Worker evidence receipts remain hash-verifiable. Token-shaped secrets and private paths continue to be redacted. Includes the v0.12.0 Goal Contract and Worker release capabilities.