v0.4.0-rc.3

What's Changed

• ADR-0009: accept per-agent connector-secret design (#429) by @alexrao2000 in #435
• plugin-format: secrets policy field (#429) by @alexrao2000 in #436
• cluster: per-agent connector-secret Secret + render assertions (#429) by @alexrao2000 in #439
• local tier: per-agent connector secret delivery (#429) by @alexrao2000 in #438
• Add agentos update: self-reinstall the CLI from the checkout by @alexrao2000 in #443
• install.sh: always rebuild the CLI (drop the mtime skip heuristic) by @alexrao2000 in #444
• Reject reserved AGENTOS_* connector-secret names by @alexrao2000 in #445
• Platform CLI verbs: versions/memory/approvals/observability (local + cluster) by @alexrao2000 in #446
• TUI: lead with a "Platform" tab of the primary product functions by @alexrao2000 in #448
• TUI: guided "Deploy to Slack" workflow (local + cluster) by @alexrao2000 in #441
• TUI: collapse the two Deploy-to-Slack recipes into one tier prompt by @alexrao2000 in #449
• AGENTS.md: mandate local-stack cleanup and worktree-based test edits by @TheConnMan in #472
• Adopt semver for the ACI, true the version to 0.2.0, and enforce compatibility by @TheConnMan in #471
• Close two approval-seam defects: silent fail-open gates and collapsed 403 reasons by @TheConnMan in #470
• Wire the dispatcher to the platform API and gate boot on it by @TheConnMan in #469
• Post route-bound approval cards over the default transport by @TheConnMan in #468
• Share model resolution between local up and local comms by @TheConnMan in #467

Full Changelog: v0.4.0-rc.2...v0.4.0-rc.3