chore(release): @hasna/emails 1.3.13

[andrei-hasna]

Summary

• bump @hasna/emails from 1.3.12 to 1.3.13
• document the reviewed attachment message-identity diagnostic fix
• preserve the merged implementation tree unchanged

Identity

• base: 6c90c73a7963285c2de0289b8d3ac21b55397709
• release commit: 7d28fac882c1cce3581e3fd0ff8ee18e319ac1e8
• release tree: 8c0007f6db549a470f88b0827a7be4d4285da527
• implementation merge tree: e68fa2ddfe0714cae3e32fa52d0a29d9d6cfb5de
• task: 336c812e-c87a-4bda-b612-eba60d4368d8

Scope

• package.json
• CHANGELOG.md
• no lockfile or implementation changes

Validation

• focused attachment tests: 19 pass, 0 fail
• no-emit TypeScript check: pass
• full build: pass
• self-host SDK type contract: pass
• deployment workflow policy: pass
• static self-hosting contract: pass
• generated SDK diff: empty
• package identity: @hasna/emails@1.3.13, public npm registry, hasna/emails provenance
• npm pack dry-run: 712 entries, no tarball created
• staged secret scan: pass
• range secret scan: 0 findings across 5 added lines
• diff check: pass

No publish, install of the release, deploy, mailbox mutation, merge, or lockfile change is included.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[andrei-hasna]

[REVIEW] GO — #215 @ 7d28fac — lens: correctness+security+gates, reviewer Hostus (1 of 1)

Reviewed:

• git log --oneline origin/main..HEAD at fetched base 6c90c73a7963285c2de0289b8d3ac21b55397709; exit 0.
• git diff origin/main...HEAD --stat; exit 0: 2 files changed, 5 insertions, 1 deletion.
• Full diff of CHANGELOG.md and package.json, plus surrounding contents in both files and commit metadata. The change is release metadata only: package version 1.3.12 -> 1.3.13 and the matching 1.3.13 changelog entry. No runtime code or trust boundary changes.

Gates:

• bun install; exit 0; setup only, not the repository test gate; 324 packages installed.
• bun run test; exit 0; 4333 pass, 156 skip, 0 fail, 4489 tests across 290 files.
• The repository declares no typecheck script; no typecheck gate was invented or run.

Blocking P0/P1 findings: none.

Non-blocking follow-ups: none.