v0.36.0

Summary

Release v0.36.0: everything merged since v0.35.0.

• #939 (#940): providers get a post-persist OAuth hook. A provider class may expose on_oauth_persisted(credentials, *, credentials_path), read by the new mureo.core.providers.get_oauth_persist_hook. The configure wizard calls it once, right after the authorization-code callback has written the obtained token into the provider's section, with a read-only view of the merged section and the path of the secret store it was written to; a plain Save never calls it. The hook may be async. A hook that raises keeps the saved token: the wizard logs a warning naming the provider and the exception class (never the values) and still redirects to /done. Documented in docs/plugin-authoring.md ("Post-persist hook").

Full details in CHANGELOG.md under [0.36.0].