Release v1.24.0: layered forensic CLI and evidence-led documentation

[alloevil]

Release scope

• Add inspect --summary --json, explicit SHA-256-checked evidence expansion with UTF-8 byte paging, and stable JSON error codes.
• Preserve full successful report shape and diagnostic semantics. Migration: JSON failures now emit an error object instead of empty stdout; coverage-incomplete output retains its report with a structured stderr diagnostic.
• Update English/Chinese READMEs with the scoped real-session forensic case and question-led workflow.
• Publish referenced controlled experiment protocols/results in the repository only. No automatic reports, model-benefit claims, MCP or raw log uploads.

Verification

• 348 product tests; 14 new-experiment selftests; 16 automated claims pass locally.
• Build, generated drift, lint and actionlint pass (existing warnings retained).
• Fresh local tarball install returns 1.24.0; summary and 64-byte evidence page/nextOffset work; wrong hash and missing input return structured errors.
• Packaged dashboard and JS return HTTP 200; experiments/output excluded from npm.
• Secret scan reports only two existing synthetic redaction fixtures, no added credential finding. Private logs/maps/artifacts are not staged.

After CI passes, merge through protection and publish via the existing Release → npm provenance workflow, then verify official-registry installation.