v0.2.0

What's Changed

• Add “Remember me” to the email sign-in form
• Update scorecard.yml to allow manual trigger
• Update scorecard.yml to correct workflow dispatch
• Harden dependency installation and error handling
• Add OpenSSF Best Practices evidence and supporting process docs
• chore(docker): bump node from aadf416 to 2d984a1 in the docker group by @dependabot[bot] in #8
• chore(ci): bump the actions group with 3 updates by @dependabot[bot] in #9
• Support sealed environment variables via KMS, Secrets Manager and SSM
• Back off from a peer JWKS fetch that just failed
• Roll the session idle timeout forward when a session is used
• Remove PROMPT_NONE_SHARED_SESSION, which never did anything
• Keep rejected configuration values out of /healthz
• Bound what a common upstream may assert
• Default CORS on /token and /userinfo to every origin
• Make outbound calls work on Workers: system DNS, and the fetch option that broke everything
• Reject unsafe logout links and tunneled private IPs
• Stop a peered deployment publishing a JWKS with a peer's keys missing

Full Changelog: v0.1.0...v0.2.0