v0.5.0

What's Changed

• Silver criteria: repeatable build, release verification, CONTRIBUTING, assurance case by @Yoshiofthewire in #72
• ci: build with the Go version go.mod names by @Yoshiofthewire in #73
• fix: bind CSRF tokens to the session and let local accounts enrol TOTP by @Yoshiofthewire in #74
• docs: add license, contributing, security, and code of conduct by @Yoshiofthewire in #75
• chore: re-vendor go-webdav (AI/LLM fork labeling) by @Yoshiofthewire in #76
• Add OpenSSF Best Practices and Scorecard badges by @Yoshiofthewire in #77
• feat: unify calendar with the Busnes suite shell by @Yoshiofthewire in #79
• Enforce KyCalendar key floors and support strong TLS by @Yoshiofthewire in #80
• appearance: theme page for every role, no sidebar select by @Yoshiofthewire in #81
• Sync ky-ui 0.4.1 classic theme catalog by @Yoshiofthewire in #82
• chore(deps): Bump alpine from 294b683 to be26560 by @dependabot[bot] in #83
• chore(deps): Bump the go group with 2 updates by @dependabot[bot] in #84
• chore(ci): Bump github/codeql-action/upload-sarif from 4.39.0 to 4.39.1 in the actions group by @dependabot[bot] in #87
• chore(deps): Bump vite from 8.3.4 to 8.3.5 in /web in the npm-build group by @dependabot[bot] in #85
• chore(deps): Bump lucide-react from 1.59.0 to 1.61.0 in /web in the npm-runtime group by @dependabot[bot] in #86
• feat(sso): end sessions on KyIdentity back-channel logout by @Yoshiofthewire in #88
• fix(sso): fence subject-wide back-channel logout by @Yoshiofthewire in #89
• fix(store): sign out SSO sessions no back-channel logout can reach by @Yoshiofthewire in #90
• Sync ky-ui 0.4.3: field and status contrast by @Yoshiofthewire in #91
• Improve KyCalendar phone views and keyboard focus by @Yoshiofthewire in #92
• Restore KyCalendar time labels and keyboard navigation by @Yoshiofthewire in #93
• Record corrected KyCalendar captures and comparison gallery by @Yoshiofthewire in #94
• Restore start times in phone Month view by @Yoshiofthewire in #95
• Record KyCalendar round 3 results and owner Month preference by @Yoshiofthewire in #96
• docs: add OctoCounts badge to the License section by @Yoshiofthewire in #97
• ci: run plain and strong-key race suites in parallel per backend by @Yoshiofthewire in #98
• ci: give every non-PR run its own concurrency group by @Yoshiofthewire in #99
• Start the 0.5.0 release line by @Yoshiofthewire in #100

Full Changelog: v0.4.3...v0.5.0