v0.5.2

What's Changed

• docs(readme): drop the leave --force first-run step (fixed by #156) by @masonwyatt23 in #159
• fix(security): session temp 0600 + dir fsync, race-safe history key, locked leave read (Tier-1) by @masonwyatt23 in #160
• docs(readme): drop npm 0.5.0 caveat now that 0.5.1 is live by @masonwyatt23 in #161
• fix(core): enforce 0700 on LOCUS_HOME at Store::open by @masonwyatt23 in #162
• docs: first-run benchmarks and install corrections by @masonwyatt23 in #165
• feat(cli): locus autopin suggest (L2) by @masonwyatt23 in #163
• fix(recovery): dead-broker hint says locus enter first by @masonwyatt23 in #176
• Add CodeQL, Scorecard, and coverage tooling by @masonwyatt23 in #178
• test(ci): phantom+locus merge-queue integration test by @masonwyatt23 in #164
• build: declare rust-version (MSRV) for cargo install path by @masonwyatt23 in #179
• perf(exec): drop the broker accept sleep (0.051 s to 0.004 s) by @masonwyatt23 in #180
• bridge: RQ-DEADCODE-locus by @masonwyatt23 in #184
• fix(loopback): allow plain HTTP only to exact 127.0.0.1 and ::1; refuse localhost by @masonwyatt23 in #187
• bridge: RQ-CLI-1 by @masonwyatt23 in #183
• fix(marketplace): refuse userinfo and redact query in index URL output by @masonwyatt23 in #185
• bridge: RQ-LOCUS-DOCTOR-FRESH by @masonwyatt23 in #198
• bridge: RQ-LOCUS-EXEC-PERF by @masonwyatt23 in #203
• feat(session): locus renew (opt-in, lifetime-bounded) + expired-pin leave/enter (RQ-LOCUS-PIN-TTL) by @masonwyatt23 in #193
• chore(release): 0.5.2 by @masonwyatt23 in #208

Full Changelog: v0.5.1...v0.5.2