v1.3.0

What's Changed

• fix: export the container default shell by @BrettKinny in #153
• Add YOLO aliases for supported AI agents by @BrettKinny in #155
• Clarify Squarebox's multi-faceted purpose by @BrettKinny in #156
• Consolidate the Install identity schema contract by @BrettKinny in #158
• Make Box replacement recoverable by @BrettKinny in #159
• Add explicit Windows adapter migration by @BrettKinny in #161
• Use terminal-safe Herdr direct shortcuts by @BrettKinny in #157
• docs: sync release and roadmap guidance by @BrettKinny in #166
• Update README.md by @BrettKinny in #168
• Update README.md by @BrettKinny in #169
• chore(deps): bump the actions group across 1 directory with 3 updates by @dependabot[bot] in #170
• Bound Box PID count with --pids-limit=4096 by @BrettKinny in #165
• Add PowerShell as an optional default shell by @BrettKinny in #167
• Remove unshipped sqrbx-learn and command logger by @BrettKinny in #171
• Pin external APT signing keys by primary-key fingerprint by @BrettKinny in #172
• Authenticate GitHub API metadata requests when a token is available by @BrettKinny in #173
• Harden Dev Container capabilities and PID bound to match installers by @BrettKinny in #174
• Refuse unattended purge of a non-empty nested Workspace by @BrettKinny in #175
• Make the host ~/.ssh mount opt-in (SQUAREBOX_MOUNT_SSH) by @BrettKinny in #176
• Record v1.3 rc2 hardening and fixes in CHANGELOG by @BrettKinny in #177
• Track difftastic's versioned release asset names by @BrettKinny in #178
• Refresh image-tier tool versions for v1.3 by @BrettKinny in #179

Full Changelog: v1.2.3...v1.3.0