v0.0.18 — Production Hardening II

What's Changed

• fix(api): run core migrations before plugin init — fixes first-boot race (#3741) by @msywulak in #3744
• docs(adr): ADR-0020 — durable agent sessions by @msywulak in #3753
• refactor(api): plugin init in boot DAG with type-level Migration dep (#3743) by @msywulak in #3763
• fix(mcp): harden datasource provisioning validation by @jstar0 in #3772
• docs(roadmap): kick off v0.0.18 — Production Hardening II by @msywulak in #3773
• observability(api): add OTel spans to profiler seam + Stripe webhook (#3684) by @msywulak in #3775
• feat(integrations): operator-settable creds for remaining chat platforms by @msywulak in #3774
• fix(plugins): complete uninstall teardown across catalog/marketplace/datasource paths (#3681) by @msywulak in #3776
• chore(ci): fork-PR merge guardrails (close #3772 loophole) by @msywulak in #3778
• fix(billing): durable Stripe teardown outbox + reconcile sweep (#3679) by @msywulak in #3781
• test(web): deflake starter-prompts cache contract under parallel runner (#3455) by @msywulak in #3780
• fix(billing): drift detection gates on active local rows, not empty table (#3679) by @msywulak in #3783
• prod(api): operational verifications — scheduler region intent, MCP-spine guard, prod-floor warn (#3687) by @msywulak in #3782
• chore(next): lead emitted prompts with a loud worktree banner by @msywulak in #3784
• chore(commands): bake worktree dep-install into session-spawning slash commands by @msywulak in #3786
• ci(db): enforce expand-contract migration rename/drop discipline (#3686) by @msywulak in #3785

New Contributors

• @jstar0 made their first contribution in #3772

Full Changelog: v0.0.17...v0.0.18