fix(llm-wiki): release bounded scheduler runtime v0.3.2

[ivankuznetsov]

Summary

• release the four-host llm-wiki marketplace package as 0.3.2
• vendor the standalone 0.1.16 transactional queue, scheduled drain, and refresh-branch publication runtime
• preserve the marketplace consent gate and validated OpenClaw owner dispatch
• reconcile linked worktrees to one non-persistent systemd timer per repository
• serialize provider work machine-wide with a 4 GiB/no-swap service limit
• batch source-pin transactions and reconstruct recoverable interrupted queue files
• stop obsolete or consent-disabled managed timer units during upgrade

Incident addressed

Historical bootstrap/test checkouts installed a distinct persistent user timer for each path. Those units accumulated and all caught up after boot, launching many wiki workers together and exhausting memory. The new installer anchors one timer to the repository primary checkout, removes obsolete units, and never uses persistent catch-up.

Scheduled work now consumes the durable post-commit queue and publishes only llm-wiki/refresh. It does not write into or push the protected default checkout.

Verification

• python3 scripts/validate-agent-packages.py --inventory
• python3 scripts/generate-agent-packages.py --check
• python3 -m unittest discover -s tests -v (65 tests)
• Bash syntax checks for all four managed scripts
• ShellCheck for all four managed scripts (excluding the two intentional literal SC2016 cases)
• native Claude package discovery passed locally
• native OpenClaw package discovery passed locally
• local Codex and Pi discovery reached only the reproducibility version gate: installed Codex 0.144.6 vs pin 0.144.3; installed Pi 0.81.1 vs pin 0.80.10

Live-provider/API-key checks were intentionally omitted because this runtime and release are fully covered offline and no provider keys are configured.