Includes the five commits since alpha.3: service trust manifest skip
under SKIP_SIGNING, navigation search/hash preservation, plugin loader
Promise unwrap, release-process docs, and Authenticode-based service
binary verification.

Widens the @commoners/solidarity peer constraint in serial and windows
to accept alpha.4 alongside alpha.3 + future 1.x finals.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>