v1.5.0 — four-family default + CI + audit P3 fixes

See CHANGELOG.md for the full entry.

Migration note (user-visible default change): the default committee now fields a genuine fourth family — seat D moved from a free second-Anthropic Self-MoA subagent to Moonshot kimi-k2.7 via auggie. This fixes a correlation the v1.4.0 audit flagged (seats B, D and your Claude arbiter were all Anthropic — 3 of 5 judging minds one family). Cost impact: the default now bills 3 seats (A/C/D) instead of 2. To revert, swap seat D back to an Opus subagent (block commented in config.example.yaml); on machines without auggie the seat auto-falls-back to codex.

Highlights

• New GitHub Actions CI: tests + leak-check across Python 3.9/3.12; tag-time version/badge consistency (audit F1).
• Five P3 correctness fixes (F2–F6), each with regression tests; suite 162 → 169.
• Disclosures: cross-seat prompt-injection propagation, arbiter-same-family correlation, confidence-as-ordinal; README platform range.