AppRC 0.28.0

➕ Added

• Added AppRC.import_dependency_config() so a parent can explicitly map a
  dependency's leaf config section to parent-owned fields and build it from the
  parent's ResolvedConfig. Parent fields own mapped defaults, validation,
  secrets, and provenance; aliases are supported, and one dependency section
  can have separate bindings in different parent namespaces. Dependency
  environment, selectors, registries, user files, and storage files are
  excluded. A storage-required section uses the parent's selected storage
  after the parent enables and selects storage. Dependency packaged defaults
  remain opt-in. Mapped dependency fields must be dataclass fields with
  init=True so the parent can supply their values during construction.

💔 Changed

• Clarified secret-directory permission prompts and repair guidance to name
  this user, SYSTEM, and Administrators as the allowed Windows principals.