Maintenance layer 2.0
Client 0.5 adds exactly budgeted preflight, five-state contract reporting, retry-safe updates, non-square control geometry, safe holds, and Ed25519-signed run records. Existing keys and client 0.4.3 remain valid on the frozen legacy path.