v0.38.0

Bundles everything merged to main since v0.37.0. Minor bump (feats since the last tag).

Features

• operator notification sound — opt-in audible cue (#41 → #289)
• plan candidates surfaced on the no-claimable-task dead-end (#288)
• repo-less install — bootstrap.sh + marketplace-cache runtime, drops the manual clone (#39 → #287)

Fixes

• hardening pass — hooks-liveness doctor check, pinned bootstrap, visible fail-open, docs (#286)
• safe-commit — harden the hook against gate-bypass attempts (#283)