release: DS Agent v1.6.0

[Lee-take]

Summary

• Package the accepted Step 6 persistent automation, restart checkpoint, idempotency/effect/reconciliation/dead-letter, and exact-undo behavior as DS Agent v1.6.0.
• Update only release/version metadata, public governance and release documentation, updater/user-agent version identity, and the source-release guard.
• Preserve the accepted C6A, C6B, and C6C implementation without reinterpreting its authority contracts.

Validation

• Release-source guard: passed.
• Focused updater/version tests: 13 + 1 passed.
• Step 6 Rust filter: 22 passed, including the exact 100/100 deterministic fault matrix with 0 duplicate effects and 0 blind replays.
• Lifecycle projection: 2 passed; migration: 1 passed; recovery: 29 passed.
• Complete Rust: 1,030 passed, 0 failed, 13 explicitly ignored (1,043 total).
• Root suite: 231-file secret scan with 5 self-tests, all configured Node suites, 1,604-module production build, complete Rust repetition.
• Fresh absolute-zero cargo clippy -- -D warnings: passed.
• Two fresh Tauri/NSIS builds: application and installer byte-identical.
• Extracted candidate: exactly 9 files; only the expected 3-byte Tauri UNK to NSS bundle marker change.
• Isolated packaged-candidate UI plus local Word artifact smoke: passed with verified profile cleanup.
• Aggregate offline release-local gate: passed; live DeepSeek intentionally skipped.

Boundaries

This release does not use Microsoft 365, perform Step 7 work, enable production Microsoft/Google account registration or live external writes, or implement Step 8. The Windows application and installer are intentionally Authenticode NotSigned, as disclosed in the release documentation.