Hardener v1.2 - rollback fidelity fix

Adds SHA-256 fidelity assertion in the rollback path. If a reverse-patch produces a hash that does not match the pre-fix hash stored at PostDelta time, the write is aborted rather than silently applied.

Hardener v1.1

Term-paper reference build. SHA-256 of the binary in the checksum file.