Bind 0.2.3 evidence to attested release assets

[Chris-ObtuseAI]

Outcome

Binds the 0.2.3 public evidence and checksum document to the exact tagged, GitHub-attested Windows assets.

Verification

• downloaded both draft release assets and SHA256SUMS-windows-x64
• recomputed both SHA-256 digests locally and matched the workflow manifest
• ran Smoke-RampageInstaller.ps1 against the downloaded public NSIS: PASS
• install/uninstall exit 0, six payloads, both shortcuts, healthy owner services, no sidecar leak
• Validate-Showcase.ps1: PASS
• Assert-RampageVersion.ps1 -Tag v0.2.3-fabric-proof.1: PASS (9 surfaces)
• git diff --check: PASS

The notes explicitly preserve the separate byte identity of the source-identical local package used for the live Qwen and sustained-compute proof.