Prepare Dander 0.3.0rc1

[harrisonoconnorhover]

What changed

• Set package, lockfile, scaffold, graph-preview, distribution, and CI assertions to 0.3.0rc1.
• Add candidate release notes for graph operations/deployment previews, Odoo, simulator-validated NetSuite, and Salesforce Bulk API 2.0.
• Refresh the handoff with the completed source-free acceptance and release boundary.

Runtime boundary

This is a release-preparation-only change. src/dander is byte-for-byte unchanged from merged main. It does not tag, publish, deploy, apply Terraform, or modify any schedule.

NetSuite remains explicitly simulator-validated and is not represented as real-tenant support.

Validation

• uv lock --check
• uv run ruff check .
• uv run ruff format --check .
• uv run mypy src tests
• uv run pytest — 677 passed
• locked dependency audit — no known vulnerabilities
• Terraform format and validation for platform and stage zero — passed
• wheel/sdist build and identity/archive inspection — passed
• wheel and sdist installed separately outside the checkout; both reported 0.3.0rc1, generated source-free projects pinned to the candidate, and validated
• generated Terraform initialized with backends disabled and validated
• local Linux container build and runtime-contract checks — passed

Prior capability acceptance

Merged Odoo and Salesforce each completed source-free live acceptance against disposable systems. Replay remained duplicate-free, cursors were monotonic, transforms/tests and metadata completed, and leases cleared. Sanitized evidence is recorded in issue #26 without any retained schedule change.

Do not merge, tag, publish, or deploy without separate direction.