Rust engine v0.1.6

Adds fail-closed, value-free Pharos beacon credential retirement with reviewed intent binding, crash-safe replay, durable tombstones, read-only reconciliation, and release-gated age-backed smoke coverage.