feat: publish Tend v0.2 Preview 2 source

Export the reviewed allowlisted snapshot from private source commit 8aab3db43f35e6a49aa497f45d73701b13fc9f32 and tree 992132ea4703437dc13ffdbb04a077816c02caf9. This includes routed singleton continuity, deployment evidence, strict schema-2 configuration, restricted transport, and the independently compilable public-tree guard.

AI-Assisted: OpenAI Codex
Signed-off-by: Cole Speelman <crspeelman@gmail.com>

RELEASE.md

@@ -19,13 +19,18 @@ The release tag and attached candidate must be built from the final reviewed
 source commit. Documentation-only changes after the recorded campaign require
 one final identical-candidate maintenance pass before tagging.
 
-`v0.2.0-preview.1` is a separate, additive release line. It requires schema 2,
+`v0.2.0-preview.1` is an immutable, additive release line. It requires schema 2,
 the restricted `push`/`receive` transport, root-owned environment-file
 references, host-wide activation serialization, and HTTPS public-origin smoke.
-It may be tagged only after the exact same v0.2 binary successfully deploys,
-rolls back, and reactivates both Gamertan and the Sandwich Hime website. EQL is
-not part of this generic gate; its SQLite/catalog publication needs a dedicated
-adapter rather than arbitrary hooks.
+Its exact released source remains unchanged.
+
+`v0.2.0-preview.2` adds bounded deployment-event JSONL, routed-origin
+activation continuity, rollback annotations, and the reviewed operational
+friction record. It must preserve every Preview 1 security and release gate.
+The exact same Preview 2 binary must deploy, roll back, and reactivate
+Gamertan, the Sandwich Hime website, and Gamertan Observatory before the tag is
+created. EQL is not part of this generic gate; its SQLite/catalog publication
+needs a dedicated adapter rather than arbitrary hooks.
 
 `v0.1.0-preview.1` is immutable but withdrawn: its source and module checksums
 are valid, while a fresh `go install` reports the development identity because