Release GERM 0.4.1

[emeisazam]

What changed

• Correct the Cosmoaudition frame bridge to consume outputValue, preserve source evidence, and explicitly withhold malformed or out-of-range controls.
• Accept finite JavaScript wire numbers whose integer spelling exceeds signed 64-bit storage, while continuing to reject non-finite values.
• Keep sound_id, Sonic Lineage, and Earworm identity stable across safe file renames.
• Make audio, metadata, and verified MASA companion renames transactional; refuse changes that could break Akousmata locators.
• Tighten companion discovery and deletion so decoy or unresolved evidence cannot be removed.
• Optimize bounded Matter Analysis helpers and align public language with the Sonic Matter Framework.
• Publish the consistent GERM 0.4.1 runtime, docs, citation, lockfile, and macOS bundle version.
• Harden CI with pinned Ubuntu and Node versions, locked dependency sync, read-only checkout credentials, concurrency, timeout, and the complete dashboard syntax set.

Why

The 0.4.0 integration expected a Cosmoaudition control field that is not present in the published modulation contract and allowed mutable filenames to leak into durable lineage identity. File companion operations also needed stricter provenance and transactional guarantees.

Validation

• uv sync --extra dev --locked
• uv run pytest -q - 218 passed
• uv run ruff check server tests
• Python compileall
• All 13 tracked JavaScript files pass node --check
• All 8 tracked shell and command files pass bash -n
• Dashboard smoke and macOS swift build
• OpenAPI: 87 paths, 101 operations, no duplicate operation IDs
• MASA 0.1.1 reference validator: two generated MatterRecords and all 10 Micro processing requests valid against protocol 0.1.0
• Pinned pip-audit: no known vulnerabilities, two documented ignores
• uv lock --check, uv pip check, gitleaks, git diff --check, and public-file/path hygiene