v2.2.0

Changelog

• 3ba678d: Merge feat/cost-budget: per-job cost/token budget (v2.2) (@kabirnarang-ux)
• 529528f: feat(costbudget): Postgres-backed Meter, atomic add, cross-replica sharing (@kabirnarang-ux)
• 81b3c96: feat(costbudget): config block, mirrors JobBudgetConfig split (@kabirnarang-ux)
• 7e4f5e2: feat(costbudget): domain Meter/Verdict/Config with per-tool cost lookup (@kabirnarang-ux)
• 675092c: feat(costbudget): flag-gated Checker, tenant-safe cost key, fail-open on meter error (@kabirnarang-ux)
• b59cab7: feat(costbudget): in-memory Meter + Lister, race-tested (@kabirnarang-ux)
• fbf9a69: feat(costbudget): wire job_cost_budget in cmd/wardline; all-flags e2e proves grant-override live (@kabirnarang-ux)
• 9fea7bb: feat(dashboard): read-only cost-budget view + nav badge, 404 when off (@kabirnarang-ux)
• 7326aca: feat(policy): expose cost_over_budget state as input.cost_over_budget in the decision context (@kabirnarang-ux)
• 3f88ffc: feat(proxy): Decider gains optional CostBudgetLookup, mirrors JobBudgetLookup (@kabirnarang-ux)
• 9404a38: feat(proxy): cost-budget hard gate sharing admittedViaGrant with job-budget's — grant-override built in from the start (@kabirnarang-ux)
• cf4a1d8: fix(budget): make the documented session TTL fallback real for job-budget and cost-budget (@kabirnarang-ux)
• 7e0f14c: style: gofmt cost-budget struct literals (config.go, decider.go, opa/engine.go) (@kabirnarang-ux)