v0.0.16 and v0.0.17: audited engine hardening

Two releases close 38 tickets from the 11 September audits: VM rooting, coercion, TypedArray semantics, parser, GC and metadata, while preserving the exact 95,939 of 95,942 result on the previous corpus.

The correctness audit starting from ee107d4b (v0.0.16) found host values and exceptions lost across a callable Proxy's apply getter, a structured argument returned as Opaque and a string as an unrelated Date, TypedArray species and byte-copy semantics, and six reproduced defect regressions. The follow-up covered ArrayBuffer, SharedArrayBuffer and DataView re-entrancy, a CAS retry in SharedArrayBuffer.prototype.grow, strict ToNumber versus BigInt across a dozen algorithms, Promise combinators and iterator closing.

v0.0.17 (127477bd) is "audited engine hardening". Both audit reports are in docs/audits/, and the scorer fix that came with them exposed 42 false passes in the older corpus (95,897 of 95,942 before the fixes, 95,939 after).