0.5.6 — Productization hardening + cross-channel demonstration campaigns

🇫🇷 Release « productization hardening + campagnes cross-canal ». Le durcissement de mise en production (scope de session, sécurité des secrets, CI qualifiée) est coupé en 0.5.6, accompagné de trois campagnes de démonstration auto-suffisantes validées en direct — une par canal. Dézippez, install.cmd, c'est prêt.

What's new

Productization hardening

• All stateful libraries use Robot SUITE scope; API and Fiori state is partitioned by the rf-mcp synthetic-test namespace (ECC remains one live session per process).
• Python 3.10+ across both distributions and CI (3.10/3.12 matrix); mypy also covers the ECC and Fiori public façades.
• Robot Framework 7.4 Secret values are accepted at the IDP, OData Basic-auth and RFC boundaries; cross-origin API URLs and redirects are blocked before an Authorization header can escape, and disabled TLS verification is warned.
• CI runs an offline Browser/Web-Components smoke and qualifies the downloadable ZIP by installing it outside the checkout (MCP + Chromium), publishing a CycloneDX SBOM and build provenance.
• New comms/ version-sync guard: any version cited in the communication base must match pyproject.toml.

Cross-channel demonstration campaigns (self-contained — import the libraries directly, no resources/ reuse — and validated live)

• tests/robot/exploratory_campaign_a4h.robot (ECC, live A4H 4/4): delivery-class inventory (DD07L/CONTFLAG), a reversible SCARR CRUD write cycle (SE16 « Create Entries » → read-back → delete → back to 0), and a dynamic TADIR catalog sweep classifying every TABL object of the Flight and EPM packages as a real table (counted) or a type-E structure.
• tests/robot/exploratory_campaign_fiori.robot (Fiori, visible browser, 6/6): cookie-consent handling, control-tree inventory, a reversible SearchField interaction, a dynamic control-type role↔xpath convergence sweep, and the xpath locator grammar (hierarchy + @controlType predicate).
• tests/robot/cross_paradigm_api_visual.robot (API + GUI + visual, 3/3): the EPM product count agrees across OData $count (SEPMRA_SHOP/Products) and SE16 (SNWD_PD), and the SE16 screen is sealed by a perceptual-hash baseline (Screen Should Match Baseline).

Proof numbers unchanged: 677 unit tests · 93 % coverage · 17/17 live scenarios.

Attachment: sapfx-pack-0.5.6-win.zip — self-contained Windows deployment pack (both wheels, business resources, recorders + MV3 extension, 6 sample suites, maintenance scripts, test agents). Install: unzip, then install.cmd (options -WithMcp, -WithBrowsers).