Qualify v0.4.1 Android CPU dispatch and source policy

[leehack]

Android arm64 Vulkan/OpenCL validation in run 34948903228 rejected v0.4.1's new full-source fingerprint after successful compilation. Independent source review and an exact-source Android artifact audit found no ARM dispatch/ISA blocker.

This adds only the audited ggml/KleidiAI source pair and retains the existing 18-function instruction containment policy. Dedicated exact-v0.4.1 Android, compiled QEMU dispatch/compute, and Windows ARM64 ClangCL CI lanes preserve previous candidate coverage. Non-SME emulation additionally runs with GGML_KLEIDIAI_SME=1 to check unsupported-feature fallback. The production pin remains unchanged.

Validation:

• All 119 Python tests passed, including exact-pair acceptance, unknown/mutated-source rejection, and instruction containment negatives.
• actionlint and git diff --check passed.
• NDK28.2.13676358 release ARMv8.2 CPU helper built exact upstream b29c606e28a01b1bc8c1351026a0fa6e616bf6c4; production validator passed 256,196 instructions with 2,187 scalable instructions contained in the unchanged 18 audited functions.
• All 17 exact-head hosted checks passed: Validate Wrapper and Validate Release Provenance, including exact-v0.4.1 Android ISA, compiled emulator compute/fallback, and Windows ARM64 ClangCL qualification.
• Independent Astra-high audit of head 365ce1c2bfebe23e98d2fdb72419d6b4f092c7f9 against base 3685772c196d9c2430cc098a1a741640e957c2dc: zero blocking findings and zero known PR-caused P1 regressions. Auditor independently repeated artifact/source verification and 19 focused tests; three policy deletion/bypass mutations were caught.
• Zero unresolved review threads; exact head/base unchanged after qualification.
• Physical Android/SME execution: N/A, not performed. Local CPU inspection does not establish full Vulkan/OpenCL packaging or device behavior.

See docs/v041_android_isa_qualification.md for source delta and artifact identity. No publication retry, consumer adoption, or repository setting change is included. Merge requires explicit maintainer approval.