Publish recovery candidate 2 evidence

[Chris-ObtuseAI]

What changed

• moves the public Windows download redirect and release link to v0.3.1-recovery.2
• records all six candidate-2 public package hashes and sizes
• records the candidate-2 source commit and provenance result
• records the physical owner upgrade, healthy Recovery Center, non-destructive repair restart, resident agent, and fresh signed offer
• explains why candidate 1 was superseded and how foreign controller pins remain fail-closed

Validation

• all six documented hashes match the release-hosted checksum files
• candidate-2 Windows manifest binds version 0.3.1 to merged commit a6b608e
• exact public installer installed with exit 0 and preserved the owner runtime
• native Recovery Center reported Local lifecycle is consistent · Owner · Owner Active
• Fix Rampage restart returned controller ready, one agent, and one fresh signed offer
• git diff --check