v2.17.0

Release v2.17.0

Added

• r:cran-prep tarball-check stage — builds a source tarball, inspects it for vignette/build artifacts (.quarto/, _freeze/, .html, *_files/), then runs rcmdcheck::rcmdcheck(tarball, --as-cran, --run-donttest). Catches CRAN/win-builder failures that a source-tree check hides.
• check_build_hygiene tarball inspection — scans the built tarball for build artifacts that .Rbuildignore failed to exclude.
• lib/sitelint.py + r:site --check-leaks/--deploy — pkgdown deploy leak guard (issue #52): clean-ref deploy from a named temp-branch worktree, excludes untracked files.
• tests/cli/ dogfood + e2e test suites — plugin structure, version sync, lib CLI smoke, and fixture-based end-to-end tests.

Fixed

• r:winbuilder silent failure when lib.rcmd is not importable — now falls back to devtools::check_win_*() with a warning.

Changed

• Archived historical docs/specs/ to archive/specs/, removing them from the published docs site.

Verification

• pytest: 524 passed, 2 skipped
• test-all: 44/44
• mkdocs build --strict: clean