Release Kaspa SilverScript Studio 0.2.8

[w00c00]

What changed

• Update the default pinned official SilverScript compiler to 6f9e078b1d8b5389212755183b592704de99fea5, while retaining the 0.2.7 and legacy compiler profiles.
• Add scalar byte/integer breaking-change detection for the current compiler.
• Add canonical v1 Covenant Descriptors to lifecycle and atomic .ssinvite packages, binding CAIP-2 network, program, covenant, ABI, state layout, and authorization metadata.
• Add the TN10 Experimental Groth16 proof-release template and a pinned Kaspa x402 interoperability profile.
• Update bilingual docs, desktop runtime packaging, release notes, and regression coverage.

Validation

• Official kaspanet/silverscript HEAD verified at 6f9e078b1d8b5389212755183b592704de99fea5.
• npm run verify: 43/43 tests passed; all nine built-in templates fully compiled with realistic parameters; production frontend built.
• Tauri cargo check --locked passed.
• Vendored preflight engine: 60/60 Rust tests passed.
• npm audit: 0 known vulnerabilities.
• macOS Apple Silicon 0.2.8 DMG: ad-hoc signature verified, packaged sidecar health/templates/JIT smoke tests passed, pinned helper hashes matched.
• Installed macOS App replaced locally and verified at 0.2.8.

Security boundary

SilverScript and Groth16 remain experimental and TN10-only. KCC721 remains pack-only and mainnet fail-closed. Compilation and local preflight are not an independent audit. RustSec still reports inherited unmaintained/unsound warnings in upstream GTK/Kaspa dependency chains; this release is not represented as zero risk.