fix: release v0.9.1 bounded Action compatibility

[artem-korolev]

Summary

• preserve bounded local-copy transport through a generated Dagger Shell script file instead of the upstream Action's unsafe inline shell input
• convert host file, directory, and Unix-socket arguments into typed Dagger Shell objects before invoking the Rush Delivery pipeline
• prepare the v0.9.1 patch release without changing the immutable v0.9.0 tag or schema snapshots
• publish v0.9.1 docs, upgrade guidance, schema snapshots, and launcher checksum
• let release smoke validate an unreleased candidate launcher before switching to immutable release-asset verification

Compatibility

Existing filesystem-only, provider-off, legacy source-import, and remote-module consumers retain their existing behavior. OCI application-image configuration remains opt-in.

Local verification

• clean Dagger self-check: 447/447 tests, yarn install, yarn typecheck
• Astro and Docusaurus checks/builds
• Trunk full-repository check
• Dagger security engine
• local source engine
• Rush toolchain engine
• canonical OCI provider-off dry run
• generated-script bounded Action-equivalent workflow

The credentialed provider/OCI and real GitHub Action consumer paths will be run on this exact commit before the PR leaves draft.

[artem-korolev]

Exact candidate acceptance passed on 4c3b750ad0fb54e4ee655d4c5c69b720b815d2f6:

• Released consumer smoke: 8/8 surfaces/scenarios
• Credentialed OCI acceptance: live OCI and eight-scenario compatibility matrix
• Local clean Dagger self-check: 447/447 tests plus yarn typecheck

[artem-korolev]

Released as v0.9.1.

• annotated tag peels to db35bb8eefef173aa052b1264b973bdb0794912d
• exact-tag consumer smoke: 8/8 passed
• release launcher SHA-256: 35e60214455a84ee27078a0e71481565b1a6d8aab53ba90d511cf0d5970afc27
• public v0.9.1 schemas byte-match the tagged tree; release-linked Pages guides are live
• post-release task archive was pushed separately and did not retarget the tag