bundle-v0.1.0

Signed ARM64 node bundle. release-sha256.txt identifies the canonical manifest; SHA256SUMS identifies downloadable files. Build provenance is available through GitHub artifact attestations.