v0.4.16

Summary

• Engine 6.20.35: failure discipline, shell-secret redaction, heredoc-safe sessions
• App version bump (DMG via ./build.sh when shipping binary)