v0.4.49

What's Changed

• chore: migrate CI to shared workflow template by @vampik33 in #28
• chore: migrate codex-security-fix to shared workflow template by @vampik33 in #30
• chore: sync toolchain config from canonical source by @vampik33 in #31
• feat: add CodeQL scanning workflow by @vampik33 in #32
• ci: add dependency review workflow by @vampik33 in #33
• ci: add standardized concurrency groups to workflows by @vampik33 in #34
• fix(ci): use literal concurrency group to avoid collision with callers by @vampik33 in #37
• ci: consolidate publish.yml — delegate CI to reusable ci.yml by @vampik33 in #38
• chore: remove CI artifact files and add .gitignore entries by @vampik33 in #39
• fix(ci): remove push-to-main trigger from ci.yml to prevent concurrency collision by @vampik33 in #40
• chore: migrate to unified stable release pipeline by @vampik33 in #42
• chore: sync version-tag and crates-publish workflows from REPO_MANIFEST.toml by @vampik33 in #44
• chore: add empty extensions field to ChannelMessageEnvelope literal (TASK-082 Bug 3) by @BimaPangestu28 in #45
• ci(security): guard codex-security-fix against fork PRs by @vampik33 in #46
• chore: move Codex security-fix trigger to nightly schedule by @vampik33 in #47
• chore(release): bump to 0.4.49 and align binstall with shared workflow by @vampik33 in #48

Full Changelog: v0.4.48...v0.4.49