feat: release Direct v0.7.15

[0thernet]

Summary

• Require Bombadil fast-completion promotion to retain exact device and inode provenance across matching scans, preserve atomic scan behavior, and reject same-scan partial/completion lineage independently of UUID.
• Advance the package, installation guidance, release documentation, and trusted publication surfaces to v0.7.15 while retaining v0.7.16 future sentinels and immutable historical recovery records.
• Regenerate the shipped Bombadil tooling bundle and synchronize the reviewed package ceilings at 230,000 packed bytes and 1,070,000 unpacked bytes.

Release and recovery evidence

• Keep historical v0.7.5 through v0.7.14 recovery fail-closed and exercise every reviewed source, file-count, unpacked-size, and integrity oracle with exact npm 11.19.0.
• Preserve the capture semantics in the fast-completion regression through a type-only mutable capture cell, without weakening the bigint device/inode assertions or three-scan topology.
• Normalize UUID-independent same-scan diagnostic precedence while retaining identity checks, rename retry, pending-disappearance proof, quotas, accounting, and final inventory validation.
• Bind the final candidate to 59 regular package files, 222,059 packed bytes, and 1,058,635 unpacked bytes in the canonical gate.

Validation

The exact PR head passed the complete canonical bun run check sequence with Bun 1.3.14, Node 24.18.1, and isolated npm 11.19.0:

• TypeScript typecheck.
• Release and recovery workflow: 20/20 tests and 381 assertions.
• Build and clean-consumer package smoke.
• Source suite: 370/370 tests and 70,128 assertions.
• ESLint.
• Todo example: 25/25 tests, typecheck, production boundary, and Direct boundary verification.
• React Native example: 29/29 tests, typecheck, iOS and Android production-boundary verification, and deterministic React Native Web verification.

Publication boundary

The v0.7.15 tag, npm package, and GitHub Release remain unpublished. Publication stays pending a protected merge followed by exact-main verification and the trusted release workflow.