Release v0.2 host integrations

[RTPI-ltc]

What changed

• Add a version-constrained OpenClaw native before_prompt_build adapter and official-container compatibility gate.
• Add standard Codex and Claude Code plugin bundles without installing or invoking either host.
• Preserve the v0.1 behavioral core with SHA-256 locks.
• Add reproducible bundle builds, offline manifest/schema validation, a 240-case integration contract benchmark, and a version-locked LocalAuditPlanner adapter.

Safety and compatibility

• The OpenClaw package registers no tools, services, providers, channels, or network clients.
• Subprocess execution uses execFile, a minimal environment, timeout/output bounds, and sanitized failure logs.
• Codex native runtime was not invoked and the user's Codex configuration was not modified.
• Claude Code was not installed or started.

Validation

• python3 -m unittest discover -s tests -v (24 passed)
• python3 scripts/validate_skill.py .
• python3 scripts/verify_release.py .
• Codex official plugin validator passed offline.
• Claude official Draft-07 manifest schema passed with locked SHA-256.
• 240/240 exact core parity, schema validity, and safety-field integrity on all three bundles.
• OpenClaw 2026.6.11 official image: install, runtime load, Skill discovery, bridge execution, high-risk guard preservation, and prompt-safe fallback logging.
• actionlint passed.