v0.18.2

Code signing policy: https://github.com/CodesWhat/careerrat/blob/v0.18.2/docs/CODE_SIGNING_POLICY.md

What's Changed

• fix(acp): pick a non-interactive auth method before OAuth and fail fast when none is usable by @scttbnsn in #306
• fix(desktop): honour updates-off at startup, no windows after teardown, exit on a second quit by @scttbnsn in #310
• docs: retire the port parity audit as superseded by @scttbnsn in #307
• fix(web): apply the update toggle's own response and show an installing state by @scttbnsn in #311
• docs(engines): explain the four gates behind the two supported engines by @scttbnsn in #303
• feat(export): plain-text resume export in the app by @scttbnsn in #308
• fix(scoring): key Workday postings the same way the vendored dedup does by @scttbnsn in #304
• ci: fail on stale or uncovered allowScripts entries by @scttbnsn in #305
• feat(doctor): per-runtime status line and single-sourced path containment by @scttbnsn in #309
• docs(changelog): open the Unreleased section for the post-0.18.1 merges by @scttbnsn in #312
• chore(starchart): rotate the caller to dev/v0.16 and pin the retired chart hosts by @scttbnsn in #313
• test(ci): close the four workflow-discovery gaps left from the #305 review by @scttbnsn in #314
• fix(search): close the four sourcing findings left from the #304 review by @scttbnsn in #315
• fix(doctor): verify the whole launcher chain before running a selected runtime by @scttbnsn in #316
• chore(release): cut v0.18.2 by @scttbnsn in #318
• chore(release): promote dev/v0.16 to main for v0.18.2 by @scttbnsn in #319

Full Changelog: v0.18.1...v0.18.2