release: prepare dream-machine 0.2.0-next.3

[ruvnet]

Prepare the next Dream Machine prerelease after the clean-source evidence repair (#175) and zero-surface evaluator correction (#177). Update only the CLI manifest, lockfile entry, and exported CLI version to 0.2.0-next.3.

Validation:

• Independent review of the three-line version diff passed.
• 331 focused compiler/CLI tests and six release-boundary tests passed locally; dependency audit found zero advisories.
• A nine-file candidate tarball passed the existing archive inspector, installed in a fresh directory, and both installed CLI commands passed smoke checks.
• Full Linux checks must pass on this exact head. Native Windows broad checks encountered existing POSIX-only symlink, UID, executable-resolution, and path assumptions; those tests were not weakened.

After merge, run the existing Release workflow with dry_run=true to build and preserve the canonical verified tarball. Publication remains gated on the documented GitHub environment/main protections and npm trusted-publisher configuration. No version tag, npm publication, experimental rule-learning promotion, or autonomous service activation is included in this PR.