v0.29.0

What's Changed

• chore(deps): bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #692
• chore(deps-dev): bump vite from 8.3.4 to 8.3.5 in /apps/sysknife-shell in the npm-minor-patch group across 1 directory by @dependabot[bot] in #690
• fix(setup): report failed user service installs by @dannyward630 in #699
• test: fuzz the daemon's trust boundary with cargo-fuzz and ClusterFuzzLite by @vladimirrott in #707
• docs(changelog): record #699 by @vladimirrott in #708
• chore(deps): bump the cargo-minor-patch group across 1 directory with 4 updates by @dependabot[bot] in #705
• build: honour DESTDIR in make install and ship LICENSE in every package by @vladimirrott in #710
• ci: require a DCO sign-off, scope Pages grants, keep the crates.io token off argv by @vladimirrott in #732
• build(ci-node): override re2js and katex past their advisories by @vladimirrott in #733
• docs: security policies, an assurance case, a VEX, and Dependabot on every lockfile by @vladimirrott in #734
• docs(changelog): credit jay23606 for the crates.io token fix by @vladimirrott in #738
• chore(deps): bump pyyaml from 6.0.2 to 6.0.3 in /tools/ci-python in the ci-python group across 1 directory by @dependabot[bot] in #735
• chore(release): 0.29.0 by @vladimirrott in #739

Full Changelog: v0.28.0...v0.29.0