Release v3.3.0

Added

• Select the generated project name and root namespace independently from the application identity with cratis render --project-name and --root-namespace.
• Import canonical Screenplay workspace files with cratis render --workspace, preserving their source, application and document identities, and authoritative catalog.
• Receive exact changed-file and manifest hashes in JSON render publication receipts, together with recovery state.

Fixed

• Render nested Screenplay folders without passing filesystem paths into the compiler's non-path document-identity contract.
• Honor cancellation after the final file operation before publishing the managed manifest, leaving interrupted changes recoverable.

Security

• Bound workspace input to 32 MiB and validate the opened file before reading, rejecting nonregular inputs such as pipes and devices.