v0.2.0

Tested with Dolt 2.4.2. sfx upgrade and starfixd upgrade verify these files; to check a manual download, see README, Install.

What's Changed

• docs: add AGENTS.md and CLAUDE.md for AI-assisted contributors by @edwardfward in #19
• feature: add a one-line install script by @edwardfward in #20
• maintenance: add scheduled and release vulnerability scans, Dependabot and CodeQL by @edwardfward in #22
• feature: claims with leases, epochs and a server reaper by @edwardfward in #21
• maintenance: ignore Claude Code subagent worktrees by @edwardfward in #24
• docs: add a test-first Go engineer agent for Claude, Codex and Gemini by @edwardfward in #23
• feature: agents registry and who by @edwardfward in #25
• feature: setup --all and SessionStart hooks for every harness by @edwardfward in #26
• maintenance: starfixd log level and format settings by @edwardfward in #27
• feature: inbox, server push and structured handoffs by @edwardfward in #28
• docs: record the unattended-operation decisions by @edwardfward in #29
• feature: idempotency keys, acceptance checklists and similar issues by @edwardfward in #31
• feature: sfx setup claude-desktop by @edwardfward in #30
• fix: run the gate before releases and harden security tests by @edwardfward in #32
• fix: harden sfx setup and config discovery by @edwardfward in #33
• fix: treat other principals' text as untrusted data by @edwardfward in #34
• fix: only the holder or an admin may change a held issue by @edwardfward in #35
• fix: harden starfixd with limits and a Dolt account check by @edwardfward in #36
• feature: reach servers behind Google Cloud IAP by @edwardfward in #37

Full Changelog: v0.1.0...v0.2.0