v2.1.0

What's Changed

• ci: verify-publish — refresh uv index per retry, widen window to ~15 min by @ax-jkikta in #148
• fix: translate policy status codes, add compliance rollup, rename uptime to uptime_minutes by @ax-jkikta in #149
• fix: get_device_by_uuid carries the device_detail legend (audit finding 1/N) by @ax-jkikta in #150
• fix: audit_events_ocsf decodes time and OCSF enum ids (audit cluster 2) by @ax-jkikta in #151
• fix: policy-run device_outcomes grouping + exit-code legends (audit clusters 3-4) by @ax-jkikta in #152
• fix: decode schedule bitmasks in catalogs; project real worklet fields (audit clusters 5+8) by @ax-jkikta in #153
• fix: patch_approvals_summary unwraps the {size,results} envelope (audit, high) by @ax-jkikta in #154
• fix: align compliance semantics in aggregate views with platform rule (audit) by @ax-jkikta in #155
• fix: device_detail/full_profile drop phantom keys, project real per-device fields (audit) by @ax-jkikta in #156
• fix: reports tools distinguish patch severity states and explain compliance (audit) by @ax-jkikta in #157
• fix: self-describe policy-execution timeline and per-device run results (audit) by @ax-jkikta in #158
• fix: drop phantom package fields; add severity vocabulary legend (audit) by @ax-jkikta in #159
• fix: label vuln-sync coded status/severity strings (audit) by @ax-jkikta in #160
• fix: label policy-window vocab/units and preserve zero pagination (audit) by @ax-jkikta in #161
• fix: label opaque/unit-silent fields in account- and server-group tools (audit) by @ax-jkikta in #162
• fix: data-extract envelope/phantom keys + Splashtop status legends (audit) by @ax-jkikta in #163
• fix: audit_events_ocsf filters category client-side on type_name (audit) by @ax-jkikta in #164
• fix: list_org_api_keys envelope unwrap + get_user/get_account_user account-security projections (re-audit) by @ax-jkikta in #166
• fix: get_data_extract accepts an integer extract_id (re-audit) by @ax-jkikta in #167
• fix: reconcile device-surface compliance + severity legends (re-audit) by @ax-jkikta in #168
• fix: policy-domain projection legends + pending-approval count (re-audit) by @ax-jkikta in #169
• fix: correct package/worklet/audit-v2/vuln-sync legends and projections (re-audit) by @ax-jkikta in #170
• docs: upgrade window/action-set legend provenance from issue-165 live verifications by @ax-jkikta in #171
• fix: approvals decision-axis + remediation status legends from SE-org verification (#165) by @ax-jkikta in #172
• release: 2.1.0 — the projection-audit release by @ax-jkikta in #173
• chore: resolve CodeQL quality findings + review polish (tests only) by @ax-jkikta in #174
• chore: eliminate the last dual-form import (test_config) by @ax-jkikta in #175

Full Changelog: v2.0.3...v2.1.0