Arc 0.6.0

Arc 0.6.0

Arc 0.6.0 makes generated administrator access application-owned and event-sourced.

Fresh applications now include a User aggregate, projector, users_view migration, and
projection-backed browser/API authentication. make setup creates the first administrator from
interactive prompts or the one-shot ARC_SETUP_ADMIN_NAME, ARC_SETUP_ADMIN_EMAIL, and
ARC_SETUP_ADMIN_PASSWORD variables. Setup is idempotent and never writes the plaintext password
to .env.

UI scaffolds now provide functional profile and password forms, refresh cookie identity after
profile changes, and revoke API sessions after password changes. Synthetic generated-admin
identity and runtime ADMIN_* authentication have been removed, as have incomplete registration,
recovery, and Settings surfaces.

Generated resource UI also receives an explicit form-state contract and a responsive compact
filter group, fixing new/edit rendering and desktop/mobile filter layout. The clean-room gate now
proves fresh setup, JWT login, API CRUD, browser sign-in, browser Product creation, CSRF-backed
forms, absent Settings behavior, formatting, tests, and Clippy for generated applications.