[rldyourmnd]

Prepare installation-component version 0.0.95 from qualified main dfc3dd5db8f9fe913b3eeaa1a8099cf91c661ff0 after source qualification #210. That increment passed all 27 final-head checks, and main CI/security passed. This PR changes only Cargo.toml and Cargo.lock: the workspace package, three local dependency declarations and four local package versions. External dependencies, registry checksums, toolchains, kit identity, profile declarations, workflows, runner bindings and credentials are unchanged.

Final preparation head: 9c64b2d03d1e15fbc71a4471bd9f47743e1e5b64. Source-only TOML validation proved every registry package record unchanged and exactly four local package-version updates. Exact-head CI and security passed. All 27 attached checks are accepted, including all three OS tests, MSRV, static/supply-chain/import boundaries and standalone-package verification.

Part of the seven-component family increment under ai-stp #1073. GitHub/PyPI/crates.io were rechecked at 2026-10-26T05:55Z: current public release 0.0.94; 0.0.95 unused in every channel for all seven components. The changelog remains Unreleased until an actual release exists; no future release-ledger heading is invented.

After exact-head and main qualification, publish this component's immutable 0.0.95 tag through the existing release/crates/PyPI workflows and verify six OS/architecture assets, checksums and provenance. Do not update ai-stp's family pin/routes until all seven authenticated component journeys pass. Retained plans keep exact old release identities. This does not close wider MCP/content/collision/vendor-loading/platform acceptance.

No tag/release/workflow publication was triggered by this PR. No local component build/runtime or package generation, new cache/clone/worktree, vendor executable change, L2 setup, user snapshot or host/agent restart. No public ai-stp CLI/Desktop release/tag. Before tagging, rollback is closing/reverting this preparation; after publication use an immutable corrective follow-up release.