v0.2.5 — 2026-06-11 audit remediation Closes 43 tracked findings from the 2026-06-11 appsec review + full audit: monotonic clock (AP-01), atomic descriptor.generation (AP-02), releaseSubmitter contract + drain hardening (AP-03), submitBatch waitable leak guard, explicit public error sets, interruptible watchdog, manifest-derived version, toolchain/CI/supply-chain hardening. See docs/APPSEC_REVIEW_2026-06-11_round2.md and docs/GAP_ANALYSIS_RESOLVED.md.