Carries 6 commits since 0.3.1, headlined by: - fix(doctor): prune npx/firewall/TCC checks, stdlib port probe, non-fatal machine_id. doctor now runs cleanly from a subprocess with launchd-default PATH (/usr/bin:/bin) — the contract required by the solstone-macos .app installer for fresh-Mac users. - fix(convey): drop init password gate; password moves to settings disclosure (per CPO /init onboarding decision 5/13). Plus minor: pre-push tangled mirror hook, parakeet test marker, version-string test cleanup, _seed exclude graduation. See CPO decision record 260512-cpo-sol-doctor-path-independence-system-tools.md and VPE delivery record req_eaoixkai.