v0.15.2

Added

• spikard-ffi now ships on crates.io. The internal FFI crate was previously workspace-only; this release wires it into the publish workflow and switches its Cargo.toml to workspace inheritance so future version bumps stay in sync.

Fixed

• Regenerated all polyglot bindings against alef v0.17.15. Picks up the Elixir mix.exs packaging fix — emitted files: ~w(…) no longer requires a nonexistent lib/ directory or checksum-*.exs files, unblocking mix hex.publish.
• publish.yaml: Pass nuget-user: nhirschfeld to publish-nuget so OIDC exchange against https://www.nuget.org/api/v2/token succeeds (the new protocol requires the package owner's nuget.org profile name in the request body).
• Three protocol bugs in kreuzberg-dev/actions@v1 shipped alongside this release: publish-nuget OIDC fixed (correct endpoint, audience, body shape, and Authorization: Bearer header); publish-rubygems falls back to BUNDLE_GEM__PUSH_KEY when caller's empty GEM_HOST_API_KEY shadows the OIDC-exported value; publish-maven imports MAVEN_GPG_PRIVATE_KEY (accepts armored or base64) before mvn deploy; publish-maven-gradle accepts base64-encoded GPG keys; finalize-release retries the release lookup 6× to absorb GH API propagation race.