release: publish v4.0.8 Right Context. Right Worker

[sheawinkler]

Outcome

Publishes the Apache v4.0.8 source and generated release surfaces for Right Context. Right Worker.

The Lite lane carries truthful degraded policy packs, advisory-only search outcome intelligence, the dual-location external worker client contract, exact release notes, and current product truth. Commercial task-routing enforcement remains outside this lane.

Local Release Authority

• Exact committed tree: 8b6b1d39.
• Gateway: serial go test ./... -count=1 -timeout 20m passed all packages in 56.403 seconds; go vet ./... passed.
• Release contracts: 53 Python tests passed in 48.619 seconds.
• Generated commercial truth and public docs checks report zero drift.
• Public product truth passed 70 of 70 checks; OrbStack Compose configuration validation passed.
• One deliberately parallel full-suite run recorded TestFrontierT2ProofTimelineHoldout at 20.263083 ms against its unchanged 20 ms gate. The immediate isolated holdout passed in 0.231 package seconds, followed by the complete serial suite pass. No threshold, assertion, or implementation changed.
• Hosted CI is supplemental and is not a release gate. Exact runs created by this PR may be canceled to avoid paid runner use.

Boundary

• Apache-2.0 identity and the compact public README remain intact.
• Live search order is unchanged; no canary or activation occurs.
• The public client sends the same worker identity in query and body for compatible claims; commercial gateway enforcement is not projected here.
• No private source, paid implementation, machine path, secret, or customer data is included.

Rollback

Keep v4.0.7 and v4.0.7-public immutable. Create v4.0.8 and v4.0.8-public only after merge. Rollback remains tag-pinned without history rewriting.