feat: portable multi-profile scan and verified repair

[klssxx]

Summary

• adds the Windows x64 portable interface and reproducible Judge Mode
• detects Python, Node.js, Go, Rust, Maven, and .NET Windows profiles
• verifies projects in isolated workspaces and applies only bounded Python/JavaScript repairs after explicit consent
• documents fail-closed toolchain diagnostics and judge access requirements

Verification

• 184 tests passed
• targeted Ruff, documentation parity/claims, version parity, and entropy secret scan passed
• frozen Judge Mode: ALLOW 1 handler, DENY 0 handlers, 4/4 gates, RELEASE_ELIGIBLE
• portable manifest: 123/123 payload files verified, clean exact source commit
• Node.js and Go samples VERIFIED; Rust/Maven/.NET fail closed with documented environment diagnostics

Candidate

Commit: e1749f8
Portable ZIP SHA-256: 71b39c606bf790126154141f5ac3ecde7c529ed58c3d5c1f1a3d5dc19dfe2011

Boundaries

Workflow isolation is not an OS sandbox. Automatic repair is limited to the documented bounded Python/JavaScript mutation set. Missing third-party toolchains never produce a VERIFIED result.

[klssxx]

Public judge artifact is now available:

• Release: https://github.com/klssxx/THEKEY/releases/tag/build-week-candidate-e1749f8
• Portable ZIP: https://github.com/klssxx/THEKEY/releases/download/build-week-candidate-e1749f8/THEKEY-Portable-Windows-x64.zip
• Candidate commit: \�1749f8b8b72ac35fa3771d72f4ed49971e1a7f2\
• SHA-256: \71b39c606bf790126154141f5ac3ecde7c529ed58c3d5c1f1a3d5dc19dfe2011\

GitHub reports the uploaded asset digest as the same SHA-256. Anonymous HTTP access returned 200.

[klssxx]

Updated premium bilingual UI candidate

• Release: https://github.com/klssxx/THEKEY/releases/tag/build-week-candidate-3d915f9
• Portable ZIP: https://github.com/klssxx/THEKEY/releases/download/build-week-candidate-3d915f9/THEKEY-Portable-Windows-x64.zip
• Commit: \3d915f94818987d57f6e6554f8e040229388d0d8\
• SHA-256: \f8986c09bf9f89c8bcc6f26a5a70d2886da5db787b3d0b94ed4e31b9c205624\

Verified: 186 tests, all GitHub CI checks, 123/123 payload hashes, frozen Judge Mode 4/4 PASS. The UI was visually reviewed after two iterations; disabled buttons remain dark/readable, all action labels are bilingual, and THE KING/CHECKMATE roadmap modes are visibly marked coming soon. The previous release is marked superseded.

[klssxx]

Final approved chess-dashboard candidate

• Release: https://github.com/klssxx/THEKEY/releases/tag/build-week-candidate-e4f46d4
• Portable ZIP: https://github.com/klssxx/THEKEY/releases/download/build-week-candidate-e4f46d4/THEKEY-Portable-Windows-x64.zip
• Commit: \�4f46d421664f5ac13f968cfdffc935cfbba966f\
• SHA-256: \66731957abd020761ce7dc5d0dfcdf3337953dc44e2924bb7b5e0758e0af876c\

Verified: 187 tests, all GitHub CI checks, 124/124 payload hashes, frozen Judge Mode 4/4 PASS. The UI matches the supplied premium chess dashboard composition while showing only real engine/source/activity state.

[klssxx]

Full-density premium dashboard candidate

• Release: https://github.com/klssxx/THEKEY/releases/tag/build-week-candidate-62aff9f
• Portable: https://github.com/klssxx/THEKEY/releases/download/build-week-candidate-62aff9f/THEKEY-Portable-Windows-x64.zip
• Commit: \62aff9f838316e191738e470ef264a19107e1c11\
• SHA-256: \4ff58183e69cbf84e614a9d4ce52c04bca7ee5ef662e381515e43d62503d82ea\

Verified on the current 1360×720 work area: centered at 20,20 with a 1320×680 window; high-definition hero; branded taskbar icon; segmented status gauge; real activity table; 187 tests; all CI; 125/125 hashes; Judge Mode 4/4 PASS.