v0.2.0

Added

• The web console, installed on its own with marstack ui install and served by
  marstack server --ui-dir. It is published as an archive per release and checked against the
  release's SHA256SUMS, so the control plane holds no console unless one was installed.
• Signing in from a browser: POST /v1/login sets an HttpOnly, SameSite=Strict session cookie
  that the API accepts alongside a bearer token, and POST /v1/logout revokes the session it was
  carrying.

Known gaps

• The serial console of a VM or microVM is not reachable through the control plane, because it
  reads a socket on the node. That view is the one part of the console that needs a node-local
  bridge.

Changed

• The schema is applied as one transaction, so an upgrade that fails partway leaves the database on
  the schema it started from rather than on neither.