v0.43.0

What's Changed

• security: cross-repo hardening batches 2 + 3 — 18 client-side findings + audit follow-ups by @tolgaergin in #63
• security(C1): install-time Sigstore attestation verification by @tolgaergin in #69
• security(C2+C6): cryptographic integrity gate on self-update and curl installer by @tolgaergin in #70
• security(C3 Phase 8): CLI --workflow + --events + error-code dispatch by @tolgaergin in #71
• security(H17): close name@* cross-version trust laundering + bind delegate-file bodies into script_hash by @tolgaergin in #72

Full Changelog: v0.42.0...v0.43.0