v1.4.1

Added

• Added ADR 0045, defining parent-owned workload-hosted realm
  controllers; explicit runtime, infrastructure, transport, substrate,
  credential, and display provider responsibilities; type-first sortable
  provider crates; generic Unix/vsock/direct/Azure-Relay byte transports;
  Noise-authenticated component sessions with ttrpc/protobuf control services;
  Entra and YubiKey credential placement; and policy-authorized peer shortcuts
  over inherited shared transport fabrics.

Fixed

• Fixed unsafe-local persistent shells inheriting TERM=dumb from the systemd
  user manager by supplying a fixed true-color terminal baseline while
  preserving the rest of the manager environment and login-shell startup.

• Made the mkfs diagnostic bound test exercise the formatter directly instead
  of depending on unrelated existing-image repair stages.

• Made output-ring wake coverage observe data and EOF as separate valid
  notifications instead of racing both producer events into one read.

• Made disk-init test directories use exclusive process-local IDs so parallel
  tests cannot silently share and remove each other's scratch state.

• Made failed-fd-send coverage track the original pipe identity so concurrent
  numeric fd reuse cannot produce a false leak report.

• Stabilized shell-supervisor teardown coverage by allowing its asynchronous
  socket cleanup the same bounded reconciliation horizon used by the runtime,
  waking the supervisor accept loop so its owned listener unlinks before forced
  scope teardown, and ensuring a missing/replaced control socket cannot block
  verified scope collection or ledger cleanup.

• Fixed the provider-neutral launch command missing from the public
  authorization matrix and generated privileges schema. Configured launches
  remain scoped per workload/realm to launcher or admin callers, audited, and
  broker-free.