Consolidate CHANGELOG [Unreleased] -> [0.13.0] (2026-06-07), bump all 38
packages 0.12.0 -> 0.13.0. Lands the dogfood-loop hardening sprint (75
framework bugs across authorization, PHP<->React contracts, dead builders,
validation) plus the v0.12.0 tenant integration follow-ups.

The tag (v0.13.0) is intentionally NOT cut here — pushing it triggers the
public npm/Packagist publish and is the maintainer's manual step.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Diogo C. Coutinho <diogo.coutinho.ads@gmail.com>