1.0.1 — phase-0 safety net (PRs #144-#157)

Main + 14 commits: 7 bug fixes (socket reconnect resubscribe, seed title shape,
mirror_url 5xx classification, image-pro content-filter gate, watcher unlink
guard, shutdown sidecar drain, docker-start pull guards), workflow-contract
drift test, node >=20 pinning, +48 server tests (325 total), first web test
suite (57 via vitest), GitHub Actions CI.