v0.71.0

What's Changed

• feat(select-model-credential): one shared step picks every lane's credential by @kyle-sexton in #1003
• fix(select-model-credential): drop the expression from an input description by @kyle-sexton in #1004
• test: fail on expressions in action metadata text by @kyle-sexton in #1006
• chore: rename the release App to melodic-release in references by @kyle-sexton in #1005
• chore: sync standards components by @melodic-standards-sync[bot] in #1008
• chore: sync standards components by @melodic-standards-sync[bot] in #1009
• build: bump the vendor-actions group across 2 directories with 1 update by @dependabot[bot] in #997
• fix(apply-review-hold): read every page of a reused branch's activity by @kyle-sexton in #912
• feat(pr-automerge-dependabot): let a caller narrow the publisher allowlist by @kyle-sexton in #920
• test(report-api-budget): cover api_budget_emit_calls guards by @kyle-sexton in #915
• fix(intake-label-needs-triage): wait out a rate limit and log the API budget by @kyle-sexton in #1020
• feat(run-claude-cli): let a last subscription leg hand off with no fallback job by @kyle-sexton in #1017
• fix(sync): arm sync auto-merge at the PR's reported head, retrying once by @kyle-sexton in #1015
• feat(run-claude-cli): scan the execution file and report execution-file-clean by @kyle-sexton in #1022
• feat(automerge): arm uv patch and minor Dependabot bumps like pip by @kyle-sexton in #1025
• feat(report-lane-outcome): flag a green run whose every allowed Bash call failed by @kyle-sexton in #1014
• test(pr-review-cli): pin that the review plugin is staged from the claude-code-plugins default branch by @kyle-sexton in #1011
• fix(pr-review-security): treat output-styles/ as an instruction path in the docs-only skip by @kyle-sexton in #1012
• fix(release): fail instead of computing v0.1.0 when the Releases list comes back empty by @kyle-sexton in #1013
• feat(intake-triage): pass recently merged pull requests to the triage step by @kyle-sexton in #1018
• fix(sync): fail only the unreachable target and report App over-grant by @kyle-sexton in #1021
• fix(check-managed-files): check out the consumer repository inside the composite by @kyle-sexton in #1023

Full Changelog: v0.70.0...v0.71.0