v0.3.2

Compatibility

• This is a maintenance-only patch for 0.3.1. It does not add or remove
  configuration fields, CLI commands, public exports, managed GitHub
  capabilities, or plan/apply behavior. Existing 0.3.1 configurations and
  integrations remain compatible without migration.

Changed

• Standardized formatting and the local verification entry points so the same
  deterministic checks cover source, generated artifacts, tests, builds, and
  the packed package.
• Hardened pull-request and release workflows with pinned actions, explicit
  permissions, bounded execution, concurrency controls, and a supported Node
  20, 22, and 24 verification matrix.
• Added pull-request dependency review, scheduled and pull-request CodeQL
  analysis for application and workflow code, and verified repository-level
  secret scanning with push protection.
• Added scheduled read-only detection of structural REST contract changes and
  GraphQL mutation drift without automatically accepting a new API baseline.
  A failed audit opens or refreshes one maintainer-review issue, preserves the
  failed workflow signal, and closes the notice after the contract is clean.
• Enforced valid TSDoc as the only authored comment format in production and
  tooling source, with automated rejection of narrative comments, directives,
  disabled code, and references to private planning material.

Documentation

• Added deterministic configuration-schema, CLI, capability, and permission
  manifests with complete implemented-route coverage and SHA-256 checksums for
  immutable release assets.
• Added a deterministic, machine-readable TypeDoc reference for every
  supported programmatic export, with validation that rejects undocumented
  declarations and stale generated output.
• Replaced the application README with a complete product overview and safe
  packed-package quick start linked to the versioned documentation site.
• Moved the maintained configuration, command, architecture, security, and
  example documentation to the dedicated octoform-docs repository so public
  guidance is published and versioned through one canonical source.
• Added an audited v0.3.1 behavior baseline covering the published artifact,
  CLI and exit behavior, configuration surface, desired-state coverage, REST
  operations, authentication boundaries, and confirmed documentation gaps.
• Added a reproducible disposition register for 1,063 relevant REST operations
  and 274 GraphQL mutations, with pinned source evidence and verification that
  blocks unreviewed API surface changes.