docs: close Slice 24

[twilightsaurus]

Summary

Close Slice 24 — Direct WSS provisioning and onboarding — after completed published-artifact live acceptance of v0.3.2.

Acceptance result

PASS WITH LIMITATIONS

The closeout records:

• exact published v0.3.2 Windows and server artifacts and SHA-256 values;
• successful Windows first launch and corrected Mudlet helper provisioning;
• live server upgrade;
• public Direct WSS verification;
• desktop Direct pairing and state reception;
• three authorized look actions delivered exactly once;
• active and stopped-gateway credential rotation;
• exact-release reinstall with preserved Direct settings;
• final service/listener state and bounded journal inspection;
• deletion of the parked pre-acceptance credential after the final audit passed.

Follow-ups

Records two non-blocking future items under the existing roadmap candidate-work section:

• add installed-first-launch validation to the release workflow itself;
• improve public verifier failure diagnostics without exposing credentials or secrets.

Neither follow-up blocks Slice 24 completion.

Historical .staging-0.3.1-* directories remain documented only as preserved crash evidence, not automatic-cleanup scope.

Validation

• npm run lint — PASS
• documentation checker — 409 references across 47 Markdown files resolve
• version checker — v0.3.2 consistent across 23 release-version locations
• git diff --check — clean

Docs only; no implementation, workflow, runtime, release, or deployment changes.