v0.2.0 — public delivery

Adds cms.public for website frontends: anonymous, published-only reads.

• public.list(type, {page, pageSize}) — paged published entries
• public.bySlug(type, slug) — one entry, or null on 404
• public.menu(slug) — a nav menu, or null
• public.fileUrl(id) — a public file URL for <img src>

No auth needed, just a base URL (and tenant for multi-tenant).