v0.5.0-rc.1

What's Changed

• refactor(portal): document upgrade-handler attach window and add guard tests by @atbagan in #15
• ci(portal): dedupe push+pull_request runs and bound runner wedges by @atbagan in #16
• feat(portal): portal-JWT signing carrier, Stage 2 of the impersonation fix by @atbagan in #17
• chore(portal): bump chart 0.2.3 -> 0.3.0 for Stage 2 release by @atbagan in #18
• fix(portal): make signing-key mount readable by non-root node UID by @atbagan in #19
• feat(portal): runtime per-plugin gates for Butler-Labs-branded plugins by @atbagan in #20
• fix(portal): ship packages/app/config.d.ts in backend image (post-PR-#20 boot crashloop hotfix) by @atbagan in #21

Full Changelog: v0.2.3...v0.5.0-rc.1