v0.3.6

Changed

• agent-runner kill now reaps a stuck round's detached descendants (a child that setsid()'d off its process group) the same way serve stop already does, so a forced stop never leaves an orphan behind.
• A stop (SIGTERM / serve stop) during a sandboxed third-party spawn hook, or during a plugin-requested defer, now takes effect immediately instead of after up to 30 s — and the confined hook's child process is always reaped, never left running. A background process the hook itself forks is not reaped; its abandoned output pipe is dropped after a bounded 2 s drain wait (on a normal hook exit, surfaced as hook_failed) rather than stalling the stop.