boost v1.2.206

What's changed

Other changes

• fix(logs): redact credentials, write owner-only, never lose a crash report (#1214)
• fix(catalog): match tap qualifiers like registry.get, and keep the qualifier in the same-tap hint (#1223)
• fix(update): refresh a skill only from a skill, never a same-named workflow (#1217)
• fix(state): held skills are not "missing", quarantine survives un-sidelining, pin takes a scope (#1215)
• fix(dense): degrade cleanly on a store boost cannot use (#1219)
• release: train 2026-10-21n (research rounds 17–20) (#1225)
• Release train: CLI fixes rounds 14–16 (#1204)
• Release train 2026-10-21g: rounds 11–13 (44 fixes) (#1189)