1.20.8 — ARRIVE: 5s linger between steps; drop SHAPE tutorial

Two changes that quiet the first-run experience:

1) Linger between ARRIVE steps. After the user gestures SHAPE or
   WEATHER, the callout + active-target glow disappear immediately
   and stay hidden for 5 s so the user can hear the change they
   just made. The next callout fades in afterward. TONIC has no
   linger — gesture dismisses ARRIVE for the session. Strictly
   gesture-driven still: no callout = no linger; linger = no callout.

2) Removed the dedicated "Learn SHAPE · 2 steps" spotlight flow.
   The inline ARRIVE callout now teaches SHAPE on first launch, so
   the secondary tour was redundant. FlowId narrowed (no more
   "shape"); FLOWS / FLOW_LABELS pruned; SHAPE panel pointer-down
   no longer fires requestOfferFlow("shape"). Other tours (intro,
   advanced, share, effects) untouched.

e2e/arrive.spec.ts updated: SHAPE→WEATHER and WEATHER→TONIC tests
now also assert the linger gap (callout disappears immediately,
reappears within ~5 s as the next step). New dedicated linger test
covers the disappear-then-reappear shape. Existing keyboard +
programmatic-load + autosaved-launch tests adjusted for the dwell
timeout. tutorialState test no longer references the dropped
"shape" flow id.

1.20.3 — release: header/positioning cleanup + worker SLOW_OG

1.20.1 — fix: preset-change duck under adaptive lowPower

1.20.0 — release: LIVE SAFE + audio diagnostics + reorder duck

1.19.1 — release: SEO + LICENSE + docs

1.19.0 — release: production-readiness audit roadmap

Bundles the production-readiness-audit branch:
- harden: top-level ErrorBoundary + negative-path codec tests
- ci: tag-triggered deploy workflow + npm run release + CI badge
- a11y: aria labels, canvas roles, prefers-reduced-motion (incl.
  DREAM MACHINE strobe gate)
- perf+a11y: lazy MeditateView/VisualizerPreview, Lighthouse fixes
  (deprecated `appearance: slider-vertical` removed, <main> landmarks)
- mobile-ux: dvh drawer, 44px touch targets on coarse pointers,
  main-view screen wake-lock
- audit: per-preset click detection in audit-presets; fingerprint
  baseline refreshed and verified DSP-neutral across the perf
  hardening commits

CHANGELOG.md generated from git history (large first-run dump since
only v1.0.0 was previously tagged; future runs will list deltas
since v1.19.0).

No audio code changed in this release. The dsp-smoke fingerprint
test confirms byte-identical output vs the 1.17.6 baseline.

Release v1.0.0