Eliza v2.0.0-alpha.138

What's Changed

• fix(ci): enforce Bun lockfile in cloud image workflows by @Dexploarer in #2095
• fix(ci): pin PR electrobun release check to hosted runner by @Dexploarer in #2096
• fix(ci): keep desktop updater release host under Milady domain by @Dexploarer in #2097
• Harden release validation workflow permissions by @Dexploarer in #2094
• clean up root by @lalalune in #2102
• fix(apps/app): unbreak develop — dup wallet stub + missing prefetchVrmToCache by @dutchiono in #2103
• fix(ci): guard agent-review auth build when eliza app-core is absent by @dutchiono in #2109
• fix(ci): restore auth gate command and stabilize package-mode auth smoke by @dutchiono in #2110
• fix(ci): clear CodeFactor action findings by @Dexploarer in #2112
• chore: address codefactor complexity batch by @Dexploarer in #2113
• Codex/codefactor old findings followup by @Dexploarer in #2114
• Add CodeFactor badge to README by @Dexploarer in #2115

Full Changelog: v2.0.0-alpha.136...v2.0.0-alpha.138