v0.49.5

A one-line UX fix with a two-line consequence: the SIP ladder's key is
now visible in sightglass. **Sightglass-only** — the daemon binary is
byte-for-byte 0.49.4 in behaviour, so there is no reason to restart a
node for this. Sightglass ships in the release **tarball**, never the
`.deb`; take it from there.

### Fixed

- **The SIP ladder key was bound but never advertised, so the feature was undiscoverable.** The calls tab's footer listed `j/k`, `x`, `p`, `u`, `c` and `o` but not `s` — reported by an operator who had the pane working only because they had been told the key existed. A keymap without a hint is half a feature. The footer now lists `s sip`, greyed with the `✗` marker for a `readonly` token like every other gated key, because a key nobody can see is a key nobody uses.
  - While the ladder is **open**, the footer swaps to its own keys (`j/k scroll`, `⏎ expand`, `y copy`, `s close sip`). The overlay owns `j/k` while it is up, so continuing to advertise "select" described a key that no longer did that.
  - Adding one hint pushed the footer past 110 columns and silently truncated `originate`, trading one discoverability bug for another. The two navigation labels are now terse (`⇥ tabs`, `n nodes`) — both are already visible in the tab bar and the header chip, whereas the action keys have no other source. A render test pins the fit at 110 columns.

---

**Artifacts**

- Static musl binaries for `x86_64` and `aarch64` (`.tar.gz`).
- Debian packages (`.deb`) for `amd64` and `arm64` — `apt install ./siphon-ai_*_amd64.deb`.
- `SHA256SUMS` — verify with `sha256sum -c SHA256SUMS`.
- `*-sbom.cdx.json` — CycloneDX SBOM.
- `SHA256SUMS.cosign.bundle` — cosign keyless signature over the checksums.
- Container: `ghcr.io/thevoiceguy/siphon-ai:v0.49.5` (multi-arch, cosign-signed).

Verify the checksums signature:
```
cosign verify-blob --bundle SHA256SUMS.cosign.bundle \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp 'release.yml@' SHA256SUMS
```