docs(tools): README describes the asset mode as it is - own folder, retry, rollback (#197)

tools/README.md still said the asset unpacks into <script folder>/chemenu and
refuses an existing target, which stopped being true before #197; it now also
describes the retry and the rollback #197 added.

Files changed:
- CHANGES.md
- VERSION
- tools/README.md

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SnAJ7Z3CpVD3PRbN73QtU2

CHANGES.md

@@ -14,7 +14,7 @@ place only: `instructions/dev/version-parts.md` § The candidate model.
 
 ---
 
-## 9.0.0-beta.11 - 2026-10-07 - Asset-Preflight: Verschieben aus dem Entpackordner wird bis ca. 30 s wiederholt, nennt die Systemmeldung und rollt nach endgültigem Scheitern zurück
+## 9.0.0-beta.12 - 2026-10-07 - tools/README.md: Asset-Modus beschreibt Entpacken in den eigenen Ordner, Wiederholung und Zurückrollen
 
 **Author:** Torben Nehmer
 
@@ -41,6 +41,7 @@ place only: `instructions/dev/version-parts.md` § The candidate model.
 - AGENTS.md routing line and a toc.py docstring describe docs/ as the whole human documentation
 - tools/README.md module tree names reference_doc.py and the fourth view cli_contract renders
 - Rebase-Review Gate: Anzeigename in Hilfe- und Fehlertexten von sync und publish angeglichen
+- tools/README.md: Asset-Modus beschreibt Entpacken in den eigenen Ordner, Wiederholung und Zurückrollen
 <!-- /wikitool:bumps -->
 
 ### Tutorials: installation in English, and a first source to a first answer (#191)

VERSION

@@ -1 +1 @@
-9.0.0-beta.11
+9.0.0-beta.12

tools/README.md

@@ -38,10 +38,14 @@ placeholder lines of the copy (`RELEASE_ARCHIVE_URL`/`RELEASE_CHECKSUM_URL` in t
 `$ReleaseArchiveUrl`/`$ReleaseChecksumUrl` in the PowerShell one; the tree copy leaves them
 empty). With no `prerequisites.txt` beside it, the script is in *asset mode*: it downloads the
 tarball and its `.sha256`, refuses on a mismatch, reads the folder limit out of the archive,
-unpacks into `<script folder>/chemenu` (`--into <path>` to choose, an existing target is refused),
-and runs the tree copy of itself, passing `--set` and its exit code through. `--archive <tarball>`
-takes a local tarball instead of a download (its `.sha256` has to lie next to it); that is also
-how the tests drive it.
+unpacks into the folder it lies in (`--into <path>` to choose; a target holding anything but the
+script and a `.git` is refused), and runs the tree copy of itself, passing `--set` and its exit
+code through. It unpacks into a `.chemenu-unpack.<pid>` folder inside the target and then moves
+each top-level entry up; a move that fails is retried for about 30 seconds, each time from a
+fresh copy of the entry out of the archive, and one that still fails makes the script take back
+everything it moved before it exits 1. `--archive <tarball>` takes a local tarball instead of a
+download (its `.sha256` has to lie next to it); that is also how the tests drive it, and
+`CHEMENU_PREFLIGHT_MOVE_FAIL` stands in for a move that fails.
 
 `tools/wikitool` refuses to start (exit 42) until the preflight has written a
 *complete* `.wikitool-tools.json` and the venv exists. Past that, every `git`