chore: release 0.3.2

[saucam]

Cuts codeoid 0.3.2. Version bump + CHANGELOG only — no code changes.

• `package.json`: 0.3.1 → 0.3.2 (the release workflow gates the `v0.3.2` tag on this matching)
• `CHANGELOG.md`: new `[0.3.2]` section covering everything since `v0.3.1`

What's in 0.3.2 (7 PRs since v0.3.1)

Added

• SDLC pipeline primitive — methodology-agnostic phase engine, plugin seams, durable `bun:sqlite` state + resume, real backend runner, `pipeline.*` control plane, and a declarative (data-only) pack loader with create-from-pack over the wire. Off by default (`config.pipeline.enabled=false`). (feat(pipeline): SDLC pipeline primitive — engine, store, registries (dark) #204, feat(pipeline): real backend runner + control-plane protocol + hardening #207, feat(pipeline): declarative pack loader + create-from-pack #208, feat(pipeline): load packs from config + create-from-pack over the wire #209)
• MCP Servers settings surface — read-only `/settings` view of registry servers with transport/trust/scope/backends + live health. (feat(mcp): /settings surface — list mounted MCP servers + health #203)
• Embedded-handoff ZeroID token — web UI consumes `#codeoid_token` when framed (Studio embed), skipping interactive sign-in; daemon still verifies on every WebSocket. (feat: consume embedded-handoff ZeroID token from URL hash (skip sign-in when framed) #210)

Fixed

• Cross-cutting audit fixes across pipeline, protocol, store, and session (session.fork schema, usage.daily scope gate, tenant-scoped findByName, Gemini MCP discovery guard, dispatch re-entrancy, corrupt-row-tolerant boot resume, pack retry semantics). (fix: address audit findings across pipeline, protocol, store, session #211)

Tagging is left to the release owner — merge this, then push `v0.3.2` to trigger `release.yml`.

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.96%. Comparing base (2758bf8) to head (9e2b55d).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #212   +/-   ##
=======================================
  Coverage   87.96%   87.96%           
=======================================
  Files         129      129           
  Lines       22167    22167           
=======================================
  Hits        19500    19500           
  Misses       2667     2667           

Flag	Coverage Δ
daemon	87.96% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.