v0.0.0

Added

• plan: Plan and Step -- a reviewable set of provisioning steps with a
  dry-run rendering (Describe), a fingerprint (Hash), and an Apply that
  reports applied, tolerated and best-effort-failed steps.
• plan: an optional dependency graph. Steps that implement Identified
  and Dependent run in dependency order (insertion order among ready
  steps, so a plan without dependencies is unchanged); SetOutput and
  Ref pass a value one step produces to a later one at apply time;
  dependents of a failed step are skipped with a warning; an invalid graph
  runs nothing. Op is a ready-made Step.
• reconciler: a generic reconciler for plan-driven resources -- Enforce
  and Observe modes, Ready and Converged conditions, a re-plan after
  apply, a pending list capped at 50, a finalizer only while deletion has
  work to do (patched with an optimistic lock), an hourly drift requeue,
  and per-resource Prometheus metrics.
• reconciler: ownership and pruning. With Status.Owned set and a
  Session that implements Pruner, the reconciler records the keys a
  resource establishes and prunes keys its spec no longer wants, after the
  main plan applies.
• secret: Read and Get read one key of a Secret in the resource's own
  namespace; Get also returns its resourceVersion.
• manager: Main, a shared controller binary entry point -- flags,
  --controllers selection (an unknown name refuses to start), leader
  election, and a readiness check that fails while a watched CRD is missing.

Full Changelog: ...v0.0.0