v0.1.6: 2026-07-06 full audit remediation (26 commits since v0.1.5)

Closes all 27 findings from the 2026-07-06 iterative audit (appsec + gap/
quality/perf/security): DOT/GQL parser leak fixes, OOM-robustness across
flow/trie/unionfind/cache/graph core, BREAKING getPool() error union,
functional -Dthread_pool=false stub, CI bench fix, docs sweep. 276/276
tests in all optimize modes.