v0.7.1

What changed

• Automatically upgrade installed card-skill copies in the background after a successful render; the current render stays on its starting version and the next use picks up the update.
• Resolve updates only from the latest stable GitHub Release and pin installation to its exact commit.
• Add per-install render leases and update locks so concurrent renders and multiple installed copies cannot race or suppress each other.
• Verify installed version, content hash, and runtime readiness, with rollback when installation or preparation fails.
• Add opt-outs for all update activity or automatic installation only, plus updater self-tests and packaged-mirror validation.

Validation

• npm test
• npm run smoke
• isolated packaged install: npm ci --ignore-scripts, runtime check, and smoke
• GitHub Actions on Node.js 22 and 24 plus runtime smoke