Ship recovery-first automatic fabric 0.3.1

[Chris-ObtuseAI]

What changed

• adds a native Recovery Center with repair, pair-again, exact node revocation, and bounded factory reset
• makes Automatic the default outcome and auto-assigns technical device roles while preserving four plain overrides
• adds restart-safe controller revocation plus Rust, TypeScript, and Python lifecycle SDK methods
• prevents setup-mode sidecars and AI model pulls until the device creates or joins a fabric
• updates the README, showcase, Recovery Center screenshot, platform matrix, architecture blueprint, release notes, download path, and qualification ledger
• bumps every release surface to 0.3.1 and makes Windows distribution staging compatible with PowerShell 5.1

Why

The prior install could retain a stale pairing identity with no supported way to recover, producing invalid-lease loops and forcing manual uninstall/reset rituals. This closes the complete device lifecycle and keeps the default experience outcome-first: Rampage decides the technical role; the person chooses what they want.

User impact

A device can now recover without deleting unrelated data, an owner can forget one exact stale machine, and new installs remain inert until setup. The installer still creates the desktop shortcut. The public UX offers Automatic, Biggest AI, Fastest AI, More Work, and Protect This PC, with technical detail moved behind advanced disclosure.

Validation

• cargo fmt --all -- --check
• cargo check --workspace --all-targets
• cargo test --workspace --no-fail-fast
• cargo clippy --workspace --all-targets -- -D warnings
• scripts/Assert-RustSecBaseline.ps1 — 0 vulnerabilities
• pnpm check — desktop 18, edge 2, TypeScript SDK 12 tests plus builds
• Python SDK — 11 tests
• intelligence — Ruff, mypy, 17 tests
• scripts/Assert-RampageVersion.ps1 -Tag v0.3.1 — nine surfaces
• pnpm --dir apps/desktop tauri build
• scripts/Smoke-RampageInstaller.ps1 — install/uninstall, six payloads, desktop shortcut, controller/intelligence, node/offer, no sidecar leak
• scripts/Stage-RampageDistribution.ps1 -Platform windows-x64 — 0.3.1 source-bound manifest and matching hashes

The remaining physical owner/laptop re-pair and Remote Assist receipt are intentionally tracked as post-release gates in docs/RELEASE_EVIDENCE_0.3.1.md.