Scout v0.2.92

Scout v0.2.92 ships the canonical public Scout core and baseline web control plane from oscout/scout through npm trusted publishing.\n\nPublished to latest:\n\n- @openscout/protocol@0.2.92: https://www.npmjs.com/package/@openscout/protocol/v/0.2.92\n- @openscout/scout@0.2.92: https://www.npmjs.com/package/@openscout/scout/v/0.2.92\n\nBoth packages carry the exact public merge commit 3ecfa87 and were built by release workflow 32986512226. The attached receipt records the SHA-512 integrity, SHA-256 digest, and byte size of both immutable registry tarballs.\n\nHighlights:\n\n- Makes the public control plane release-ready at 0.2.92 while preserving the one-way public-core/private-product boundary.\n- Removes a duplicated web-server graph and adds fail-closed package-footprint gates; the signed Scout tarball is 8,126,453 bytes with 445 files.\n- Hardens scout install around immutable app release assets, Developer ID and Gatekeeper verification, atomic replacement, rollback, and exact-path process handling.\n- Keeps private macOS/iOS build and DMG tooling out of the public source and CLI surface.\n- Documents the real platform contract: Apple-silicon macOS, plus Linux with a supervised foreground broker.\n- Establishes the public macOS distribution channel with an intentionally empty appcast until the notarized app is published and anonymously verified.\n\nThis package release does not contain the native DMG. OpenScout 0.2.92 for macOS will be published separately as app-v0.2.92 after signing, notarization, stapling, and anonymous verification; the appcast is promoted last.\n\nThis remains the reviewed two-package transition release. Additional public workspaces stay unpublished until their standalone package and composition contracts are ready.