GoClaw v3.14.0-beta.6

v3.14.0-beta.6

Automated beta release from bac8f51.

Changes

• Merge upstream dev fixes
• fix(vault): enforce team access on document updates
• Merge remote-tracking branch 'origin/dev' into codex/merge-nextlevelbuilder-goclaw
• Merge remote-tracking branch 'upstream/dev' into codex/merge-nextlevelbuilder-goclaw
• fix: cannot import if file is over 1MB (nextlevelbuilder#1184)
• Fix/pipeline compaction pending loss (nextlevelbuilder#1182)
• fix(providers): omit temperature for Claude Opus/Sonnet 4.6+ (nextlevelbuilder#1180)
• fix(security): consolidate & enhance batched security fixes (nextlevelbuilder#1155, nextlevelbuilder#967, nextlevelbuilder#972, nextlevelbuilder#974, nextlevelbuilder#989, nextlevelbuilder#973) (nextlevelbuilder#1185)
• ci(release): build docker images directly for stable tags
• ci(release): publish docker digests to both registries
• test(git): isolate ssh tmpfile mismatch check
• Merge remote-tracking branch 'origin/main' into dev
• fix(mcp): keep grant checker cache invalidation active
• chore: ignore local agent config directories
• Merge pull request nextlevelbuilder#1174 from aaron-tsar/fix/vault-doc-content-on-create
• fix(vault): surface close errors + clarify slog label + drop test dup
• fix(vault): non-master tenant 500, O_NOFOLLOW, slog, *string content
• fix(vault): harden symlink containment + mirror upload enrich-progress
• fix(vault): accept and persist content on POST/PUT vault/documents
• Merge pull request nextlevelbuilder#1165 from digitopvn/main