v3.0.69

What's Changed

• fix: update HtmlTinkerX security dependency by @PrzemyslawKlys in #591
• Preserve first Authenticode signing failure details by @PrzemyslawKlys in #587
• Harden pinned recovery source and sudoers validation by @PrzemyslawKlys in #588
• Generate thin server recovery validation workflow by @PrzemyslawKlys in #589
• Complete managed module lifecycle and estate repair parity by @PrzemyslawKlys in #582
• Harden coherent server recovery operations by @PrzemyslawKlys in #594
• Require consensus for multi-surface recovery refs by @PrzemyslawKlys in #595
• Add reusable Cloudflare DNS record action by @PrzemyslawKlys in #596
• Render deferred recovery fallback as valid shell by @PrzemyslawKlys in #597
• Add reusable GitHub Sponsors content generation by @PrzemyslawKlys in #593
• Synchronize module and package release versions by @PrzemyslawKlys in #592
• Unify Apple release automation by @PrzemyslawKlys in #598
• Add typed product presentation and responsive image contracts by @PrzemyslawKlys in #546

Full Changelog: v3.0.67...v3.0.69