同印待发，双卷记程 · Prepare npm 0.5.7 release

[eric8810]

Summary

• add bilingual npm 0.5.7 release records
• record the macOS re-signing trust boundary, version closure, and rollback path
• capture the final main validations and six-platform dry-run manifest
• move the user-visible fix into the 0.5.7 changelog and refresh release links

Verification

• Core 30986015180: success
• Native WebGPU 30986015218: success
• npm dry-run 30986812237: 14/14 jobs successful, registry publication disabled
• 13-package manifest audit: source SHA, versions, package uniqueness, bytes, SHA-256, shasum, and integrity passed
• Python release contract: 13/13
• signed-artifact tests: 7 passed, 2 conditional skips
• git diff --check: clean

Release state

No npm package was published by this PR or the rehearsal. All 11 new package identities remain unpublished.