mt5-httpapi v4.12.1 — document the binary-manifest gate make test already runs verify-binaries first, but the README never mentioned it, so the manifest gate was invisible to readers. Adds the target and a section on assets/binaries.lock.json. No code changed.