Patch release: exposes the System-one gate's `policy` and `maxDropFraction` on
the settings card, which 0.5.0 added to the schema but shipped without a UI.
Additive only — no default, schema or recall behaviour changes. The field-spec
extraction in src/client/ is internal.

138/138 tests pass; the packed tarball now carries lib/client/form-specs.js.