Development review notes for 1.3.72

The initial prototype passed its focused native cases. Code review identified
unrooted PCall packing scratch across nested argument evaluation. The final code
pauses active collection from expanded-argument assembly through dispatch,
unwinds that pause on errors, and roots the result after resuming. A regression
covers multiple *args, **kwargs, nested calls and recovery from an argument error.
The pre-correction review is retained separately. Cancellation could not reach
processes in another tool PID namespace, so that review overlapped the final
run. final-suite-xml/ preserves the final run's timestamped reports separately;
full-suite/group-*.log and release-gate.json describe the final gate. This overlap
increased host load; the unchanged 180 ms GUI debounce test passed in isolation.

The first installed-wheel launcher lacked the multiprocessing __main__ guard.
A spawned conversion worker failed its launcher-origin assertion; this was a
qualification-harness defect. The corrected launcher puts installed packages
first for spawned workers and guards its own execution. The failed worker node
then passed, with the inheritance suites. No product change was needed.

LeakSanitizer's process inspection is unavailable in this host. Sanitizer runs
use ASAN_OPTIONS=detect_leaks=0, retain ASan+UBSan, and independently wrap native
allocation/free calls. The 81-position active fixture and the root-buffer growth
failure checks require zero tracked allocations after destruction. Previous
managed-boundary failure qualification remains covered in this source.

README changes are the version heading and two factual memory-lifetime
corrections. Its four approved images, URLs, widths, layout and other prose are
preserved. Historical evidence is excluded from the production branding guard;
production source and Help remain covered. File-picker path fallback policy was
extracted into qt_file_paths.py, retaining aliases for the existing dialog API.
