S2.4 final merge checklist

[masarray]

Final Single Host merge checklist completed. The hardened line is now integrated on main, exact-head qualification passed, and v0.5.0 stable publication is running from the release merge commit.