Desktop 0.1.6

Windows desktop app — bundles merrymen 0.17.0.

Includes fixes from three community contributors:

• The vault sweep now sizes itself to your actual daily cap. Previously steady-basket could propose a deposit larger than the permission wall would ever accept, and re-propose the identical rejected deposit every tick, forever, while the cash never reached the vault. Found by @zeeonchain.
• The Telegram /link code is minted as soon as merrymen starts, instead of only once Telegram is switched on — so a valid bot token no longer shows an empty code. Found by @Victory-byte.
• Fixed a backtest bug that reported policy rejections which never happened: the harness never let the day roll over, so multi-day runs spent their budget on day one and reported daily-cap for every bar after. Found while reviewing @Akixama's strategy-playground PR.

Also in 0.17.0: every trade now records the decision behind it (including the model's own reasoning and the signals it saw), and per-position cost basis makes realized P&L a real number.

Security: this build carries the dashboard DNS-rebind fix. If you are still on 0.1.4, please update — that build is vulnerable.

SHA256 f026e47de02e26348192f6abc578b6168bfc3b6cb626e18049c459f3ab424bae