Prepare Patchwright 0.2.0 community release

[s1korrrr]

Summary

• move canonical source, support, update, and release URLs to rsitech-ai/patchwright
• bump the app and Rust workspace to 0.2.0 build 3
• add a tested, exact-tag community prerelease packager that emits an ad-hoc-signed ZIP, portable SHA-256 sidecar, and machine-readable trust manifest
• consolidate dated design material into one maintained architecture document and remove obsolete audits, agent plans, reflections, and draft release material
• forbid live GitHub App qualification against both the organization repository and the legacy founder-account redirect

Release boundary

The community ZIP is explicitly not Developer ID signed or Apple notarized. It is excluded from the signed Sparkle feed and does not weaken the existing official Developer ID, notarization, promotion, or clean-machine gates.

Validation

• ./script/verify.sh
• ./script/smoke.sh
• ./script/build_and_run.sh --verify
• focused red/green packaging, update-feed, release-contract, and production-repository guard tests
• cargo fmt --all -- --check
• local Markdown link validation and git diff --check

The full Rust workspace passed. Swift executed 65 tests with 0 failures. The real staged app launched, its bundled engine reported healthy, and the ad-hoc bundle passed deep signature verification.

Deliberate exclusions

• No Codex Security scan was run, per owner instruction.
• Developer ID/notarization publication remains a separate credential-gated lane; this PR adds only the accurately labeled community prerelease path.

Signed-off-by: Rafal mrsikorarafal@gmail.com

[s1korrrr]

Superseded by the authorized author/committer privacy rewrite. A fresh reviewed PR will be opened from the rewritten main history with the same release changes and the reviewer-blocker fixes.