chore(release): prepare v0.0.49

[ackness]

Summary

Prepare v0.0.49 from the verified main branch, including the pre-release display fixes in #174. This PR changes release metadata only; plugins and worlds keep their independent versions.

- Framework manifests: 0.0.48
+ Framework manifests: 0.0.49 (19 manifests)
- Unreleased changes and v0.0.48 README notices
+ Dated v0.0.49 changelog, upgrade notes, and English/Chinese README links

The release covers recovery and streaming reliability, background-job status, storage and plugin boundary fixes, desktop layout fixes, and the switch to Node's built-in SQLite driver.

Evidence

• Before: Successful background extraction could reappear as a failed orphan turn after recovery, and filled opening-form templates could repeat a field's terminal full stop.
  After: fix: resolve pre-release timeline and form display defects #174 joins reasoning to the durable source job without hiding real failures and omits only a duplicate template full stop. Regression tests went from failing to passing; the isolated native session restored four successful extract jobs without orphan errors, and the actual generated form was replayed successfully.
• Before: All framework versions and release notices identified v0.0.48.
  After: All 19 versions identify v0.0.49; upgrade notes distinguish this release from v0.0.48's older breaking-data boundary.

Verification

• Passed locally on v0.0.49: pnpm check; pnpm test (43 successful tasks, including 249 Web test files / 1,792 tests); pnpm test:pg (1,165 store + 28 server tests); pnpm e2e (132 passed, 6 optional cases skipped); pnpm release:preflight; pnpm --filter @covel/desktop build; and pnpm --filter @covel/desktop smoke:restart.
• Real-model acceptance used an isolated macOS installation and profile: first-run setup, character creation and validation, opening plus three player turns, suggestions and free text, text/Stage views, reload, quit/restart, and successful durable extraction. The model was the configured codex/gpt-6-luna route.
• Runtime coverage, Web tests, PostgreSQL integration and browser smoke passed on fix: resolve pre-release timeline and form display defects #174 and its merge commit.
• Passed: local v0.0.49 DMG/ZIP packaging, unpacked-resource checks, Electron/SQLite readiness and shutdown, DMG integrity, installation, existing-session recovery and another real-model turn after upgrade (four player turns total; five successful extract jobs and no orphan task rows). The package-binary plugin probe passed install/approval/commit, failed-execution rollback, disable, uninstall, reinstall and persistence.
• Passed before merge: all six release-PR checks (CI, Docs) and the immutable-candidate Build Desktop dry run for 88870f9e2ca9611b40eaf1fed04bca2d1857c5c7. Both macOS arm64 and Windows x64 packaging, resource/startup verification, and Windows package-installation API checks passed. Publishing was disabled for the dry run.
• Published v0.0.49 from annotated tag v0.0.49 on merge commit 5151f152f6ca4cd362b6e81aeab405227335b36a, after main CI and Docs passed. The release workflow succeeded; its macOS job was rescheduled after a runner queue stall, retaining the successful checks and Windows artifact.
• Passed after publication: downloaded all four release assets; SHA-256 values match GitHub; macOS ZIP/DMG and both Windows embedded archives pass integrity checks and identify version 0.0.49. The downloaded DMG was installed in the isolated profile; its actual Electron binary passed startup/shutdown and the complete plugin lifecycle probe. The desktop window resumed the four-turn session, switched to Stage, and restored committed history after refresh; five extract jobs remained successful with no orphan task rows.

Not verified: Interactive Windows gameplay, other model providers, real image/audio generation, and long playthroughs of every world. Windows native CI builds and API tests do not establish a full Windows player acceptance run. The six optional live-model Playwright cases are skipped by the deterministic suite.

Upgrade notes

Existing v0.0.48 SQLite databases remain readable; no database deletion or migration is required for the driver replacement. Older-version restrictions remain documented separately. Custom storage backends must implement releaseStaleSuspensionClaims, and plugins must support the host version in any declared covel range. macOS and Windows artifacts remain unsigned; macOS is not notarized.

Docs sync and context

• Release/tooling and documentation change, following chore(release): prepare v0.0.48 #159 and chore(release): prepare v0.0.47 #137.
• Both READMEs and docs/CHANGELOG.md are synchronized. The previous Unreleased entries become the dated release section.
• ONBOARDING_VERSION remains 4 because this release adds no tutorial step.
• Contract and protocol documentation for the fixes was updated in the originating changes; this metadata PR adds no API surface.

Merge Danger

Door: Two-way before tagging; published tags and artifacts will not be rewritten.

Blast Radius: Release

Merge only after candidate CI and both desktop packaging jobs pass. Then create an annotated v0.0.49 tag on the exact main merge commit and let the tag workflow publish the release.