v0.0.8

Changelog

• e398c0b Rewrap the release paragraph in DEPLOY.md
• ae8b149 Publish the CLI release only after the image is in ECR
• a18569a Gate the CLI release on CI too
• 2ff7a83 Fix smoke-auth in CI, and stop it hiding why it failed
• 59f43c1 Gate the clickd image on CI, and run CI on every push to main
• e2b50ae Harden two boundary inputs: X-Forwarded-Proto and grant emails
• f24a166 Add a hermetic Go unit-test suite (98.7% coverage)