v0.1.0

Initial release. Four platform bundles, each carrying a sha-pinned, publisher-signed manifest (publisher ed25519:IB9iTy70SyMHnQjG1rMtOoXf3KIE3uDZpElGpBw5fUw=). Built and signed via scripts/release/run.sh against pilotprotocol df5a6b0c; sha256s in RELEASE.txt.