v0.4.15
Immutable
release. Only release title and notes can be modified.
fix(pkg): add repository field + record trusted publisher config
npm provenance verification requires package.json "repository.url" to
match the GitHub repo URL from the OIDC claims. Also commits the trusted
publisher schema so the config is documented in the repo.
Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com