Prepare desktop patch 1.0.1 and verify release pins

[antono3]

Changes

Verify direct and transitive v.mod dependency pins against installed Git tag commits in required CI. Reject conflicting pins and checkout drift. Leave current-master compatibility lanes advisory.

The helper reads module manifests rather than carrying a second dependency/version list. Companion tags require an explicit selection.

Verification

• Seven positive/negative fixture cases passed with stable V 0.5.2 and pinned V3, including annotated tags, paths containing spaces, transitive drift and conflicting pins.
• Workflow validation passed with actionlint.
• The current release dependency graph passed locally.

Desktop patch release

Bump the examples module to 1.0.1 for the merged Linux startup fix. Document current validation and a desktop-only release procedure: publish checked desktop ZIPs, retain signed Android 1.0.0 APKs byte-for-byte with their original provenance and hashes.

Startup follow-up

The standard Linux package passed rendering/AT-SPI but its later keyboard check hit the five-second visibility timeout. Complete window mapping immediately after creation, before renderer initialization queues further X11 work. Keep the bounded event wait. Twelve revised-host startup/render/exit checks passed locally with and without Openbox, followed by raw-demo keyboard checks. The complete package CI must pass for this revised source before publication; earlier package artifacts are superseded.