v4.14.0

Run402 for Buzz

• Adds the self-contained run402-buzz skill for Buzz managed agents, distributed directly from the public repository.
• Setup converges on the user's global Run402 CLI, initializes only when needed, links the separately held Buzz/Nostr and Run402 public identities, and independently verifies readiness.
• The workflow stops with Deployment: none and asks for approval before building, provisioning, spending, or deploying a contextual quick test.
• The package includes the no-secret signer boundary, released-client fixtures, strict public-event handling, receipts guidance, and installation tests. The fixed feedback-board demo has been removed.

Agent onboarding and cleanup

• A cold run402 up now returns a writable starter manifest and concrete retry action instead of only naming missing files.
• Git URL sources cloned for run402 up are deleted on both success and failure, preventing repeated agent runs from silently filling temporary storage.

Release integrity

• run402-mcp, run402, and @run402/sdk remain versioned in lockstep and were published through GitHub OIDC with npm provenance attestations.