Checkpoint the party/runtime stack before share-program and malicious-mode work.

Ship the TLS mesh, composer, Beaver/Yao/leaf MPC, prep/online paths, apps, and docs so the tree is pushable before elevating share_expr, security_mode, and prep resume.

Co-authored-by: Cursor <cursoragent@cursor.com>

include/dpf/nyble.hpp

@@ -26,6 +26,13 @@ namespace dpf
 {
 
 /// @brief 4-bit unsigned ring element, packed one nibble per lane
+/// @note Not a DPF domain. A 4-bit index is `dpf::modint<4>` or `dpf::xint<4>`.
+///       Scalar `+` and `-` wrap mod 16. A carry must not cross into the next
+///       nibble.
+/// @see dpf::bit
+/// @see dpf::twobit
+/// @see dpf::modint
+/// @see dpf::packed
 enum class nyble : std::uint8_t
 {
     zero = 0