v1.0.8

What's Changed

• docs(config): document review.layout.worker_main in forge.yaml.example by @RapierCraft in #328
• fix: gate SOPS env-var checks on deploy.secrets_backend in work-on-monolithic (#322) by @RapierCraft in #330
• Fix: $PROJECT_ROOT undefined in deploy-info.md yq layout reads by @RapierCraft in #329
• Fix: review-pr-staging.md — move Config Resolution before first var use by @RapierCraft in #331
• Fix: autopilot.md add explicit yq binding for BILLING_ENABLED by @RapierCraft in #332
• fix(scripts): preserve WARNINGS counter in verify-sops-chain.sh — use process substitution by @RapierCraft in #333
• fix(review-pr): replace for-loop subshell with while-read to prevent word-splitting by @RapierCraft in #334
• fix(scripts): use grep -F and shell expansion to prevent pattern injection in verify-route-registration.sh by @RapierCraft in #335
• fix: docsInit() TOCTOU — re-validate target path after mkdir by @RapierCraft in #336
• fix(deploy-info): resolve unsubstituted {deploy.secrets_backend} placeholder — restore SOPS advisory cross-check by @RapierCraft in #337
• fix(commands): replace awk indentation-anchored reads with yq for verification.commands.* by @RapierCraft in #338
• Deploy: 11 PR #315 staging-review fixes → main by @RapierCraft in #339

Full Changelog: v1.0.7...v1.0.8