Release cache hardening

The GhosttyKit cache path gets more defensive in this release, including provenance verification and overwrite behavior during release builds.

In other words: fewer mystery terminal engines, more “yes, that is the artifact we meant to ship.”

• Verified GhosttyKit cache provenance
• Overwrote GhosttyKit cache during release when needed
• Published the corrected 0.0.16 package