v0.2.0

Form handling, per-visitor state, and safer POSTs — the write side of Garner pages.

Highlights

• Sessions — $app->session() with lazy activation, flash messages, pluggable FileSessionStore, and session:gc
• Page actions (+action.php) — write-side POST handlers with ActionResult::failure() / redirect(), method-aware dispatch, and htmx-aware redirects
• Template fragments — optional failure fragments for in-place htmx form re-renders
• Origin-check CSRF — on by default for form POSTs; stateless, router-enforced
• Request & response primitives — HttpFoundation-backed Request instance, headers/cookies on RenderedResponse
• Symlinked installs — GARNER_PROJECT_ROOT ensures the consumer project's autoloader loads correctly

See CHANGELOG.md for the full list.