Freestanding WASM ABI for v4.local and k4.lid, audit-driven hardening
of the untrusted-input path, ruby-paseto interop fixtures, dual Zig
toolchain support with a dev-snapshot CI canary, and release hygiene
checks. Full details in CHANGELOG.md.