v0.3.28

What's Changed

• fix(ci): scope standalone declaration evidence correctly by @metasession-dev in #541
• fix(ci): promote standalone evidence scope correction by @metasession-dev in #543
• ci: bound generated readiness probes by @metasession-dev in #545
• chore: back-merge main after standalone evidence promotion by @metasession-dev in #546
• ci: promote generated readiness deadline by @metasession-dev in #547
• chore: back-merge main after readiness deadline promotion by @metasession-dev in #548
• fix(ci): harden release routing and recovery (#491) by @metasession-dev in #550
• feat(security): complete advisory risk acceptance contract (#512) by @metasession-dev in #551
• feat(ci): add durable self-hosted runner foundation (#319) by @metasession-dev in #552
• docs: align public release and execution guidance (#317) by @metasession-dev in #553
• test: harden the generated release pipeline (#85 #86 #87) by @metasession-dev in #554
• feat(cli): add governed consumer patch layer by @metasession-dev in #555
• feat(ci): add configurable self-hosted runner routing by @metasession-dev in #556
• release: promote #491 remediation bundles by @metasession-dev in #557
• chore: reconcile main after #491 promotion by @metasession-dev in #558
• chore: bump all packages to 0.3.28 by @metasession-dev in #559
• backmerge: sync 0.3.28 release bump into develop by @metasession-dev in #561
• fix(gitflow): remove inaccessible backmerge permission preflight by @metasession-dev in #562
• release: promote hotfix backmerge correction for 0.3.28 by @metasession-dev in #563

Full Changelog: v0.3.27...v0.3.28