v0.0.16 - pi host, respawn supervision, and telemetry

Nightly now supports pi as a seventh host, with in-process continuation, headless execution, background dispatch, and session resume. This release also adds the respawn supervisor, session telemetry, and redacted bug reports.

• Add pi installation, project-trust diagnostics, model routing, and extension drift checks.
• Fix a live pi continuation deadlock by closing the hook subprocess's stdin. Add an executable Node regression test.
• Add a bounded respawn supervisor with backoff and human stop controls. Installation remains an explicit operator action.
• Record stop decisions, cascade activity, and respawns in session telemetry and briefings.
• Redact outgoing bug reports and retain the substitution map locally.
• Reconcile RFC 008's completion-check implementation.
• Update the CI setup-uv action to v10.2.0 (#44).

Validation passed locally with real pi 0.87.1 using both a deterministic loopback provider and Ollama qwen2.5:7b-instruct: armed sessions continued, disarmed sessions exited, and unrelated repositories received no extra turn. Nightly's headless output parsing and background pi dispatch also passed. The supervisor service was not installed or started during validation.

All 1,773 tests pass. Formatting, lint, type checks, and nightly verify pass. All eight packages build as wheels and source distributions.

Post-push CI passed on Linux and macOS for commit 608fe1848205e2418e8db79b930afbcc84393d23.