v1.0.4

Stability hotfix candidate after v1.0.3: MCP SSH policy regression, conservative unknown-send classification, paired-device/native-worker byte framing, preservation of successful remote discovery, and Control dependency audit repair. No new ACK protocol, deduplication, Side Session or steering feature scope. Implementation, merge, deployment and publication require separate approval; release only after compatibility tests and full CI gates pass.