v0.0.32: Keep what builds produce for as long as it is useful

Reports hold the compile output and per-test timings a build was judged on, and
are the only record of what a build did; ninety days threw away the history
worth having. Caches are overwritten rather than accumulated, so fourteen days
bought nothing and cost a full rebuild to any repository built less often than
fortnightly.

The whole bucket is under a gibibyte, at $0.023 a gibibyte-month, so the limits
are now set by what is worth keeping — and configurable for callers who disagree.

The build location is also lowercased: a bucket reports its own as
EUROPE-NORTH2, which Cloud Build does not recognize as a location.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

v0.0.31: Publish the location builds belong in

Builds read and write the pipeline's bucket throughout — sources, caches and
reports — and transfers between regions are charged (Northern America to Europe
is $0.05/GiB) as well as slow. The bucket's location is therefore also where
builds should be created, which callers had no way to ask for.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

v0.0.30

cicd_pipeline: adds a cicd-publisher service account for publish builds, with access to an optional npm_publish_token_secret_id that the builder cannot read.

v0.0.29

go_web_service: the backend service timeout is configurable (request_timeout_seconds) and defaults to 300 seconds, matching Cloud Run, instead of the load balancer's 30 second default.

v0.0.28

cicd_pipeline: adds a cicd-work topic and push subscription (work_push_endpoint) so webhook deliveries enqueue build submissions instead of performing them inline.

v0.0.27

cicd_pipeline: the builder service account no longer holds KMS signing or Binary Authorization attestation rights, which the build phase does not use; they move to a separate publisher identity when the publish phase is built.

v0.0.26

cicd_pipeline: optional npm_token_secret_id grants the builder read access to a Secret Manager secret holding a private npm registry token, for TypeScript unit builds.

v0.0.25

Add cicd_pipeline module: CI/CD build/sign/attest/deploy infrastructure for the GitHub-App-driven pipeline.

v0.0.23

Fix archive only

v0.0.22

Add locked down group