v0.2.0 — api v0.2.0

Requires api v0.2.0, up from v0.1.3. No source change.

api v0.2.0 replaced the framework's two form binders with one and removed httpin. This module's go.mod still named httpin as an indirect requirement, inherited from the api version it was last tidied against. Nothing here imported the package, but a dependency's go.mod is read even when nothing in it is built — so every consumer still resolved httpin in its module graph, and go list -m all still answered that the framework depends on it.

The go directive also moves from 1.25.0 to 1.27, matching every other module — an uncommitted edit this repo has carried since September.

A minor rather than a patch bump because the dependency floor moves: anything depending on this module now resolves api v0.2.0, which is itself a breaking release.

Verified with GOWORK=off, where api resolves from the proxy rather than from ./api in the workspace — the masking that lets a published module ship broken.