Release CodeStory 0.17.7

[TheGreenCedar]

Release CodeStory 0.17.7 with coherent source reads, refresh waiting across sessions, and clearer indexing and recovery diagnostics. The user-facing changes and upgrade behavior are documented under 0.17.7 in the changelog.

PR #2533 was repaired and independently reviewed again until no confirmed flagrant issue remained. The fixes restore immutable permissions on failed publication, share one activation deadline, preserve typed schema refusals and executable recovery guidance, verify retired-directory identity before removal, exclude writer-hold instrumentation from production, and isolate the lexical test counter across threads. The follow-up review found and verified the newer-schema recovery gap before it was fixed. Version preparation is merged through #2535; the independently accepted generated freeze is integrated through #2538.

This PR promotes dev/codestory-next into main with one tree-preserving merge. The exact frozen candidate is 3264c0ec430f9b1ecfe23b1d0266a9312ac0e052, tree 5ade9b4cedfa6b8a2e85f650b767b59917acac58. Its sole parent is calibrated source 0384641ed81248125737cbf80a31abe63f28a0a0, tree 0dd1f99515321091bb5b42c132f2de1c2bf3a6a9; only the generated constant-set file differs. Main currently ends at f3966cadd6d602f2ccb7e4c99e2d8afebe1e19b8.

Completed proof:

• Source stabilization 36647667477: 4,409 workspace tests passed, 23 skipped; all-target/all-feature clippy and required hostile/native source checks passed on the calibrated source. This workspace proof was not repeated on the constant-only frozen child.
• Calibration 36650342314: three distinct protected Apple Silicon Metal runs with accelerated policy and CPU fallback disabled. The independent verifier authenticated the artifact and recomputed the selected values and lineage; the values equal the previous defaults.
• Frozen acceptance 36651380634: hostile mutation matrix, Windows native probe and exact-head freeze receipt passed.
• Qualification 36651709929: three candidate archives, isolated Linux Cargo boundary, protected Metal and Windows Vulkan qualification passed and were authenticated by the coordinator.
• Pre-publication 36657375715, attempt 1: signed/notarized macOS packaging, all three platform archives, candidate-installed accelerated runtime proofs on macOS/Windows/Linux, and the complete authenticated pre-publication ledger passed.

Albert explicitly requested the 0.17.7 bump and dev-then-main merge in the active task. That instruction authorizes this concrete promotion and its automatic publication. The coordinator records approval against the qualified commit, tree, pre-publication ledger and archive digests before merging. Merging starts the canonical automatic release; publication and post-publication installation/restart closeout remain pending until that workflow proves them. No manual tag or gate bypass is involved.

The core cache moves to schema 36, requiring a one-time rebuild on the next product call. Publication stamps move to schema 4 and remain compatible with schema 3 clients. The embedding revision remains unchanged, preserving vector compatibility. Answer-accuracy and performance thresholds are outside the selected release claim.

Refs #2536.