v0.8.0

First hardening release on the way to 1.0. Still 0.x, so the API isn't frozen yet.

What's in it

• TLS (BLADEDR_TLS_CERT/BLADEDR_TLS_KEY) with auto Secure cookies, per-IP login throttle, ingest-token rotation
• versioned DB migrations that run once, inside a transaction
• sensor event buffer so a control-plane blip no longer drops events
• /readyz + /metrics (Prometheus) + structured JSON logs
• finished the eBPF policy page; binaries report a real --version now
• SECURITY / CONTRIBUTING / CHANGELOG + a deployment guide, plus a CI smoke test
• a lot more test coverage (store 60%, api 57%, scan 45%)

Binaries below are static Linux builds — server, probe and sensor for amd64 and arm64. Check them against SHA256SUMS.

Full list in CHANGELOG.md.