v2.2.8

Release evidence:

• full verification suite passed
• stdio benchmark attached as evidence.json
• npm tarball smoke checks passed before publication