Publish Linux speech headless preview with adjusted upload limits

docs/ROADMAP.md

@@ -1,6 +1,6 @@
 # Production readiness roadmap
 
-Status: Windows v0.1.6 published and installed; Linux v0.1.4 previews published. Broader production gates remain open. Windows VM tests use CPU only.
+Status: Windows v0.1.6 published and installed; Linux headless v0.1.6 and desktop v0.1.4 previews published. Broader production gates remain open. Windows VM tests use CPU only.
 
 Karl's release priority, 2026-10-13: publish a usable first Windows version and
 install it on DEV-WIN11 now. Extensive platform/GPU, clean-machine, signing and
@@ -56,6 +56,10 @@ Google EmbeddingGemma 2 remains the main text/image/audio/video search model.
     and genuine forced-CPU recognition/context reuse from Unicode paths passed.
     [Evidence](LINUX-SPEECH-0.1.6.md); packaged shared-service retrieval, GPU and
     public speech archive delivery remain open.
+  - [x] Genuine packaged Linux Google/speech retrieval and public headless archive
+    delivery; full-byte public download verified. See [evidence](LINUX-SPEECH-0.1.6.md).
+  - [ ] Rotate the origin protection value exposed during upload-limit diagnostics;
+    keep values out of Git and coordinate its Cloudflare/Infisical configuration.
   - [x] Genuine shared-service ASR/Google lifecycle passed: verified speech
     excerpts, zero raw reencodes through policy failure/retry, and retained
     query reader; [proof](SPEECH-INTEGRATION.md).