docs: record 0.1.4 release evidence

[tensornull]

What changed

• record the immutable 0.1.4 release identity in ROADMAP.md and RELEASING.md
• link the implementation, release, CI, GitHub Release, PyPI, digest, provenance, live-smoke, and public-install evidence
• record restored release/live variables and the absence of recovery paths

Why

The release artifacts and registry records are immutable, but their verified evidence must be added only after publication. Keeping this in a separate post-release documentation PR prevents candidate state from being represented as published state.

Validation

• uv sync --locked
• Ruff check and format check
• Pyright strict
• 775 passed, 1 deselected
• public-preview and releasable document/version checks
• secret and workflow semantic checks
• actionlint 1.7.12 offline
• copied standalone repository verification, including build, twine, artifact inspection, wheel/sdist clean install, and README examples
• git diff --check
• independent adversarial exact-diff and remote-evidence review: no findings