agentgate v0.15.0 — revocable ingest keys + governance docs

Server release (Docker). Revocable, ingest-scoped agent credentials (agl_ingest_*) + POST /api/internal/verify-ingest-key for AgentLens's OTLP billing-grade attribution (#24 Option 3, #39); governance.md billing-grade note (#38). Ships pazgaz/agentgate:0.15.0 via docker.yml.

v0.14.0 — gate→lens wedge caller

Ships the AgentGate side of the agentlens #55 gate→lens compliance wedge.

• Gate→lens breach mirroring (#37): when the gate denies an action (MCP tool-call hard-deny, or a reactive metric breach), notifyLensOfBreach records it in AgentLens as a hash-chained compliance eval_result in the breaching session's audit trail — fire-and-forget and fail-open, so a lens outage never blocks enforcement. Pairs with the AgentLens receiver shipped in @agentlensai/server@0.16.0.
• docs: per-agent governance guide + dead-link fix (#35); changeset/Release-workflow cleanup (#36).

Image: pazgaz/agentgate:{0.14.0, 0.14, latest} (built + pushed by docker.yml on this tag).