v1.3.0

What's Changed

• feat: bridge AI provider — run cxg template-gen through siete's editor host-model by @Animesh-Sri-bugb in #46
• rename: SIETE_BRIDGE_* -> BUGB_BRIDGE_* (cxg bridge provider) by @Animesh-Sri-bugb in #47
• feat(pentest): carry guardlink's threat_id through to report.json by @Animesh-Sri-bugb in #48
• feat(pentest): AI-generated IPC templates and structural triage outcome by @Shahid-BugB in #41
• feat(pentest): constant-resolved IPC channels, threat correlation, identity tiers, crash recovery by @Shahid-BugB in #49
• feat(pentest): actually confirm blind vulnerabilities out-of-band by @Shahid-BugB in #50
• feat(pentest): record which identity issued a request, from the engine by @Shahid-BugB in #52
• Track B: saved-session auth for CI (import/inject, health gate, --auth-dir) by @Animesh-Sri-bugb in #53
• feat(cli): expose Track B CI-auth surface through clap by @Animesh-Sri-bugb in #54
• docs: align README and --help with shipped v1.2.0 behaviour by @Animesh-Sri-bugb in #55
• chore(config): remove 36 dead configuration keys (v1.3.0) by @Animesh-Sri-bugb in #56
• feat(config): make top-level config sections optional at load time by @Animesh-Sri-bugb in #57
• docs(cli): restructure --help for readability (presentation only) by @Animesh-Sri-bugb in #58
• fix(cli): don't print the ASCII banner onto machine-readable stdout by @Animesh-Sri-bugb in #59
• feat(cli): quiet weekly GitHub star request in the scan summary by @Animesh-Sri-bugb in #60
• docs(changelog): reconstruct CHANGELOG and bump to v1.3.0 by @Animesh-Sri-bugb in #61
• fix: remove the sandbox config section, which never confined anything by @Animesh-Sri-bugb in #62
• chore(release): prepare v1.3.0 by @Animesh-Sri-bugb in #64
• ci(release): fail the release when the Homebrew tap update fails by @Animesh-Sri-bugb in #63

Full Changelog: v1.2.0...v1.3.0