v0.9.0

Changelog

• 25480cc: feat(judge): add output_matches rule (@googs1025)
• 71e9305: fix(agent): encode cwd markers as the CLIs write them (@roark47)
• 2d5127c: fix(agent): identify session transcripts by recorded cwd metadata (@roark47)
• 31b1ab0: fix(agent): locate session transcripts without CLI naming rules (@roark47)
• 3db0de2: fix(agent): never resume another workspace's session (@roark47)
• cdb13be: fix(ci): restore required pull request gate (@zpzjzj)
• 06d2dc4: fix(evaluator): scope each multi-turn response to its own turn (@roark47)
• 2153234: fix(judge): handle empty forbidden regex matches (@googs1025)
• 306e8cc: fix(release): install GitHub CLI before publish (@zpzjzj)
• 9a450c9: fix(runtime): drop summed length from env map capacity hint (@roark47)
• b1401f1: test(e2e): cover multi-turn session resume end to end (@roark47)