v0.3.0

What's Changed

• fix(images): one staging path per writer in the artifact cache by @ashenfad in #5
• refactor(lint): adopt BLE001 — narrow or justify every blind except by @ashenfad in #6
• feat(observability): log the recoveries, derive the version by @ashenfad in #7
• feat(policy)!: require an allow entry for every host object by @ashenfad in #8
• docs: retire the kill criteria by @ashenfad in #10
• fix(runner): keep the transcript when an exec times out or crashes by @ashenfad in #9
• feat(policy): public_methods(), and reject malformed allow entries by @ashenfad in #11
• refactor(runner): caps are resource guards, not an observation budget by @ashenfad in #12
• feat(runner): optional reprobate rendering for print entries by @ashenfad in #13
• feat(diff): carry permission bits, and keep the raw archive by @ashenfad in #15
• fix(diff): stop destroying symlinks on rebase by @ashenfad in #16
• chore(lint): clean tests/, and have CI actually look at it by @ashenfad in #14
• perf(cache): move cache values onto binary frames by @ashenfad in #17
• fix(images): boot the guest with the image's environment by @ashenfad in #18
• docs: add a changelog, and sort the docs by half-life by @ashenfad in #19

Full Changelog: v0.2.1...v0.3.0