v0.15.13

What's Changed

• ci: pin actions/checkout SHA (#190/#191) + fix macOS release test flake by @maiconburn in #1006
• ctl test/UX: de-flake agent_proxy pipe test + silence macOS-xattr tar noise on model extract by @maiconburn in #1007
• fix(ctl): make Azure OpenAI configurable + visible to doctor by @maiconburn in #1008
• feat(harden): deeper kernel + MAC checks, cloud-aware FP reduction by @maiconburn in #1009
• fix(agent-guard): detect interpreter-launched AI agents via cmdline by @maiconburn in #1010
• feat(mesh): resilient init + one-command connect by @maiconburn in #1011
• fix(test): de-flake MCP-proxy pipe tests by @maiconburn in #1012
• fix(dashboard): Telegram+Slack is multi-channel, not an overlap warning by @maiconburn in #1013
• fix(ctl): enable --force to repair a half-enabled capability by @maiconburn in #1014
• test(agent-guard): de-flake MCP-proxy pipe tests via exchange retry by @maiconburn in #1017
• feat(ctl): setup auto-allowlists cloud platform infrastructure by @maiconburn in #1016
• chore(release): 0.15.13 by @maiconburn in #1018

Full Changelog: v0.15.12...v0.15.13