docs(release): reconcile Agent 0.4.0 truth

[AetherAI3]

Summary

• reconcile the README with the 0.4.0 source-candidate boundary
• state explicitly that setup, strategy compilation, and browser observation do not grant broker/order authority
• correct the bundled aether-ats-skills version to 0.2.0
• bind the operator packet to the audited c0feb197 CI, CodeQL, release-truth, clean-install, package, and 2,579-test evidence
• refresh the authoritative public model projection and regenerate all catalogue surfaces
• make generated-doc fixtures time-relative and stop treating the historical v0.3.0 digest as the permanent current snapshot
• preserve legal review, real-service canaries, tag, publication, and provenance as pending
• close superseded draft feat(rc): /rc remote-control host (AETHER-AGENT-LIVE-01 R2, stacked on #107) #108 in favor of feat(rc): RC-02 viewer host — outbox, transport, producers, command surface #149/F1 finishing: all thirteen producers, integration proofs, packaging #150

Release boundary

This is release-truth and generated-documentation maintenance only. It adds no model tool dispatch, broker connectivity, paper submit, live order path, credential handling, or execution authority. v0.4.0 remains a source candidate until the remaining release gates complete.

CI remediation

The first PR run correctly failed because the checked-in public catalogue crossed its 30-day freshness bound. The fix refreshes from Cloud's public projection without weakening that bound. It also repairs two test assumptions exposed by the date rollover: synthetic fixtures now stay fresh relative to the test process, while explicit stale/future cases retain fixed timestamps; the current snapshot compatibility test validates the checked-in projection instead of pinning it to v0.3.0's historical digest.

Verification

• Published-versus-source-candidate wording is explicit
• Operator evidence points to the audited main SHA and hosted runs
• npm run docs:check
• npm run typecheck
• focused generated-doc/release suite: 29 passed
• full local suite: 2,579 passed, 0 failed, 4 platform skips
• Exact-head GitHub CI and CodeQL
• Qualified legal review
• Real Cloud/DM/model/UVT and native setup canaries
• Final tag/publish/provenance verification