v0.15.2

What's Changed

• refactor(agent): split knowledge_graph/detectors.rs into family submodules (spec 068 Tier 1) by @maiconburn in #916
• refactor(agent): split config.rs into per-section submodules (spec 068 Tier 1) by @maiconburn in #917
• fix(sensor-ebpf): attach sched_process_exit via raw_tracepoint (spec 069 kernel 7.0) by @maiconburn in #918
• fix(sensor-ebpf): kernel 7.0 syscall arg capture via kprobe-on-wrapper (spec 069 Phase 2) by @maiconburn in #919
• feat(sensor): multi-lane event channels — stop silent drops under load (spec 069 #1) by @maiconburn in #920
• feat(sensor): promote orphan kernel-syscall events to incidents — layered FP (spec 069 #2) by @maiconburn in #921
• build(sensor): re-embed eBPF object via OUT_DIR + rerun-if-changed (spec 069 #3) by @maiconburn in #922
• refactor(sensor-ebpf): remove dead spec-053 tail-call dispatcher (spec 069 #5) by @maiconburn in #923
• refactor(sensor-ebpf): drop dead duplicate accept tracepoint + record filter audit (spec 069 #4) by @maiconburn in #925
• feat(sensor): load-time pt_regs offset self-check vs kernel BTF (spec 069 #6) by @maiconburn in #924
• chore(release): 0.15.2 by @maiconburn in #926

Full Changelog: v0.15.1...v0.15.2