v0.2.0-beta.5

Added

• ci/supply-chain: the cosign public key is now published — committed
  at the repo root as cosign.pub, exported by CI (job summary +
  artifact on every edge publish), and shipped as a release asset. Both publish
  workflows now verify each signature right after signing with the key
  derived from the CI secret, and fail the publish if the committed
  cosign.pub drifts from the signing key. README and docs gained
  cosign verify instructions (the key is Ed25519; offline/keyed, so
  verification takes --insecure-ignore-tlog=true).
• ci: tagged releases now get a GitHub Release page automatically —
  notes extracted from the tag's CHANGELOG section, prereleases flagged,
  cosign.pub attached, idempotent on re-runs. (beta.4's page was backfilled
  by hand.)
• website: Gameplane has a public marketing + docs site at
  https://valgulnecron.github.io/gameplane-website/ — features, game
  showcase, an AMP comparison, and the full documentation set, designed
  screen-first in design.pen (18 frames) and built with Astro. The source
  lives in the separate
  gameplane-website
  repo, mounted here as the website/ submodule.
• web: the last UI-audit parity items — a show/hide toggle on the login
  password field, user emails shown under display names on the Users page,
  port overrides editable in the Create Server wizard's Network step (the CRD
  and Settings tab already supported them), and "Back up now" relocated to a
  header button + dialog on the Backups page, matching the design.

Changed

• ci: the three kind e2e jobs (core / extended / game bot) were collapsed
  into a single job running the same three suites, in the same order, against
  one cluster — they were already fully serialized by the shared concurrency
  group, so the split only cost duplicate image builds, cluster setups, and
  queue slots (~15-20 min per run). Docs-only changes no longer trigger the
  test pipeline at all (paths-ignore); no test was removed.