Prepare v0.1.0-alpha.2 release

[itsreverence]

Summary

• bump the root and all workspace packages to 0.1.0-alpha.2
• update exact internal workspace dependency pins and the lockfile
• prepare the merged draft-room and stream-reliability work for tag-driven publication

Validation

• npm ci
• npm run check
• npm test (108 passed, 2 platform-specific tests skipped)
• npm run build
• npm audit --omit=dev --audit-level=high (0 production vulnerabilities)
• git diff --check
• npm run desktop:package
• packaged Windows API authentication and desktop startup smoke script
• npm run desktop:make (installer, portable executable, and ZIP)
• packaged resource scan found no source maps, CSV exports, databases, ranking/projection files, or token-named files

Distribution notes

This remains an unsigned Windows alpha and may trigger SmartScreen. Sleeper support is read-only and users must supply their own FantasyPros exports. Gitleaks was not available in the local environment; GitHub validation and CodeQL remain required before merge and tag publication.