Preserve complete release evidence and one-host Mac verification

[gitcommit90]

Summary

• makes the full numbered acceptance ledger a required PR and GitHub Release artifact for multi-item requests
• replaces --generate-notes as the primary release body with an authored notes file, artifact digests, and verification evidence
• documents the retained Apple Silicon release host as owner of build through public-download installed-app verification
• adds regression coverage so both governance contracts are enforced by npm test

Type of change

• Docs / governance
• Deploy / release tooling

Release notes

### Changed
- GitHub Releases now require the complete numbered acceptance ledger from a multi-item request, plus artifact and verification evidence.
- The retained Apple Silicon release host now owns clean build through public-download installed-app verification and Application Support preservation.

• CHANGELOG.md updated
• docs/VISION.md N/A — release governance, not product behavior

Numbered acceptance ledger

1. Complete GitHub notes — Multi-item requests preserve their original numbering from PR acceptance through GitHub Release; generic generated summaries cannot replace the ledger.
2. One-host Mac release — The retained Apple Silicon release host owns clean build, signing, notarization, packaging, public-download installation, launch, loopback smoke, and Application Support preservation.
3. Existing releases repaired — v0.0.9 and v0.0.10 now contain the complete 22-item ledger, additional countdown/licensing work, artifact hashes, and verification evidence.
4. Existing public DMG verified — The exact public v0.0.10 DMG was installed and launched on the retained release host; signature/ticket/Gatekeeper, arm64/version/bundle ID, loopback state, and Application Support inode preservation passed.

• Every requested item appears once and is implemented.
• This ledger is ready to be copied into future release notes.

Verification

• npm run typecheck
• npm test — 117 native-world + 93 passing Node/browser contracts, 1 environment-only Chrome skip
• npm run test:site — 5/5
• node --test test/release-governance.mjs — 2/2
• isolated node --test test/routing.mjs — 4/4 after one transient long-suite timeout
• git diff --check
• No secrets, private keys, or data dumps

Signed-off-by: Joseph Yaksich gitcommit90@users.noreply.github.com