v0.0.37

What's Changed

• fix(cli,db): scaffold secrets, compose hardening, workspace add, UTCDateTime render (#440–#445) by @antosubash in #446
• fix: S3 streaming + Range, task heartbeat + after-commit enqueue, token rehash, scaffold fixes, QA follow-ups (#449–#472) by @antosubash in #463
• fix: set-locale route, dashboard authz, register errors, branded auth screens, unknown-path 404, typography, scaffold Error page (#462–#475) by @antosubash in #477
• feat: Auth pages: hard-coded 'python' caption and users.allow_signup bullet; login spacing/mobile order by @antosubash in #482
• feat(db): Postgres extensions hook and LTree/TSVector column types (#458) by @antosubash in #479
• feat(hosting): OpenAPI export for typed client generation (#456) by @antosubash in #480
• feat(background_tasks): task routing, worker tuning, per-worker module subset (#447, #448, #450) by @antosubash in #481
• feat(file_storage): direct, resumable multipart uploads (#454) by @antosubash in #483
• feat(api_tokens): personal access tokens and service API keys (#455) by @antosubash in #484
• feat: durable event delivery via an outbox (#459) by @antosubash in #485
• test: run the Python suite in parallel and cut per-app setup (#524) by @antosubash in #550
• fix: settings precedence, settings editor types, signup role, S3 download names, scaffolded worker (#486–#490) by @antosubash in #525
• docs: rewrite CLAUDE.md against the current code by @antosubash in #546
• fix: security and settings bug batch (#517, #532, #533, #543, #544, #545, #547, #548) by @antosubash in #551
• fix: QA follow-ups for #551 (owner-scoped usage, download CSP, settings defaults, inline errors) by @antosubash in #553

Full Changelog: v0.0.36...v0.0.37