v0.3.0

Changelog

• 9e50fbd Launcher: mount the managed directory read-only (#146) (#149)
• 9bff8d3 build(deps): Bump sigstore/cosign-installer from 4.1.2 to 4.1.3 in the github-actions group (#143)
• d36d89b feat: enforce the [locklog] section of managed.toml (#147) (#148)
• 05ac46e fix(launcher): pick the stat flavour by probing stat; PII tests without journald (#153)
• d066b94 fix(mcp): refuse container as a field, name stale cursor params (#144) (#145)
• 3e30061 perf(parse): decode JSON lines with a scanner of our own (#150) (#151)
• c943403 release: v0.3.0 (#154)