v0.67.1

Fixed

• Generated FFI build scripts no longer rewrite tracked headers during ordinary Cargo builds.
  Header export is now explicit via ALEF_EXPORT_GENERATED_HEADERS=1; cbindgen output is buffered,
  validated as UTF-8, and published atomically to the canonical and Go destinations with rollback
  on failure. This prevents failed workspace lint or build commands from truncating generated files.