v0.17.0

This release explicitly targets Hubuum server v0.0.20.
The server image, Rust 1.88 MSRV, and public feature combinations are unchanged.
Existing 0.16.0 callers need no migration.

Added

• Typed coverage for all eleven remaining Hubuum v0.0.20 history routes in async
  and blocking clients: class/object timelines and entry lookup, exact-name
  history across identities, historical class populations, direct relationship
  history and as-of views, and historical computed values. Validated options
  preserve cursor metadata, retained-history coverage, and explicit unavailability.

• Opt-in persistent rotating sessions through SessionStore, SessionStoreGuard,
  and redacted, serializable StoredSession snapshots. Both client modes expose
  login_session_with_store and resume_session, coordinate refresh with an
  application-owned exclusive store lock, and persist single-use credential
  consumption before exchange. Clients remain bound to their original session
  family so concurrent logout cannot remove a newer login from storage.
  Existing in-memory sessions retain their behavior.

• Typed bounded search hydration in both client modes, with validated roots,
  target class selectors, depth/path limits, typed paths, and truncation metadata.

• Validated directional relation labels through RelationLabel, class-relation
  responses, and class-handle creation options in both client modes. Labels
  preserve the server's stored direction independently of template aliases.

• Typed administrator query-observation reads and enable/disable updates in both
  client modes, including the effective shared runtime_override.

• Typed credential creation provenance and recent source history through
  token_activity on authenticated clients and user/service-account handles,
  in both async and blocking modes. Validated offset pagination preserves
  session-family correlation, retention, collection status, and overflow evidence;
  debug output omits source addresses.

• Session lifetime and retention settings in public and administrator configuration,
  plus administrator credential-activity settings. These fields are optional so
  older server responses preserve unavailable values as None.

Fixed

• Redact pagination cursors and class/object history snapshot contents from
  Debug output.

Changed

• Refresh compatible dependencies, including ICU 2.4, cc 1.10.0,
  webpki-root-certs 1.0.11, and their supporting crates. Allowing newer Rust
  requirements did not enable additional dependency updates.
• Update the pinned RustSec audit Action to its Node 24 implementation; all
  other GitHub Actions already match their latest releases or selected branches.
• Document the server v0.0.20 class-deletion/rebuild deadlock and the workaround
  of waiting for all class reindex tasks before deletion.