fix(test): use DefaultModels() for ollama test case consistently

fix(docker): restore release container builds

fix: stabilize release gates for v1.12.0

fix: resolve robot surface session lookup and stale model metadata

feat(robot,ensemble,serve,tui): offline session support, error tracking, and output collection from saved files

feat(cli): improve invalid checkpoint handling, offline session resolution, and spawn prompt dispatch

security(checkpoint,ensemble): harden checkpoint storage against path traversal, symlinks, and corrupt data

security(checkpoint): harden storage against corrupt/malformed on-disk data with fail-closed validation

security(checkpoint,cli): fail closed on corrupt/symlinked checkpoints, reject ambiguous ID prefixes in history and summary

feat(ensemble): cross-project checkpoint resolution for resume, rerun, compare, and export

fix(cli): fail closed on explicit-session project resolution instead of silently falling back to CWD

chore(beads): bump migration-hint-ts to latest schema state

fix(mail,transfer): correct Agent Mail project-key resolution and harden reservation-transfer rollback atomicity

security(handoff): prevent path traversal and symlink attacks in writer, add modtime fallback in reader

harden(handoff): skip symlinks and fall back on malformed YAML in reader