feat: initial public release — generic guardian Worker (proxy / update / health-verify / auto-revert / recovery console)