StackKits v0.39.0

Added

• address: bind a managed install into its own install zone (D-72)
• website: add Status to the stackkit.cc footer (LG-4b)

Fixed

• api: publish backup coverage and grant in the OpenAPI contract
• ci: repin the internal updater with the org token
• cloud: bind the PocketID owner so backup lineage admits Cloud
• cloud: keep the dispatcher account for a dispatched Cloud Apply
• cloud: name ACME rate limits behind a missing public certificate
• cloud: serve Cloud identity on the bound subdomain prefix
• delivery: report acknowledged-run progress from the runtime copy
• release: keep the public export's OpenAPI consistent with its generator
• runtime: resolve the staticcheck correctness findings
• security: reject option-shaped SSH destinations from StackActions
• security: restore the weekly security workflow and schedule CodeQL
• website: sync CLI reference copy in the docs:cli gate, not just at deploy
• windows: return an owned copy of the process token owner SID

Source commit: 08d95bd8b68e2a4797370e523692bd5d7761678f