0.2.1

Changed

• Pin the shared Gates reusable workflow to 2c3c6acd0a6795768446e925a6137e17357f267a
  (Gates 0.1.2), which publishes the release the workflow on main downloads. No check, policy
  field or receipt format changed; the version increment alone invalidates receipts retained
  under 0.1.1.

Fixed

• Shared Gates 0.1.1 rejects non-automation commit authors before scanning or reusing signed
  evidence, including intermediate commits and merged side branches.

Source distribution, publish = false; no binary artifacts. Required checks passed on the
release commit: common / Security and privacy and real-backends (PostgreSQL 17.6 production
proof with verified TLS). The local gate was green before publication: 129 tests passed, 0 failed,
0 ignored, no skipped or selected-zero lane, plus cargo fmt --all --check and
cargo clippy --workspace --all-targets --locked -- -D warnings.