Breeze Core v3.0.0 (prerelease)

Prerelease of the v3.0.0 overhaul — for testing, from the overhaul branch. Not on the bolero package repo (which stays on stable releases).

This bundles two majors of work:

Ed25519 request signing (auth v2)

Per-request Ed25519 signatures — the device's private key never leaves it, the server stores only the public key, and each request binds method+path+timestamp+nonce+SHA3-512(body). Replay/tamper protected. Legacy bearer (v1) still works; AC_MIN_AUTH_VERSION clamps the floor; devices upgrade in place via POST /api/auth/upgrade.

LAN scan-to-add + opt-in beep

• GET /api/units/scan TCP-scans ports 6440–6449 across the server's private /24 so clients can offer "pick a found unit" next to manual IP entry.
• POST /control now honours an optional beep (silent by default).

This asset

breeze-core-3.0.0.pre-1.x86_64.rpm — self-contained (no Python needed), for RHEL/Fedora/Alma/Rocky/openSUSE (x86_64). Installs the hardened breeze-core systemd service. Smoke-tested: installs and runs, reports Breeze Core 3.0.0.pre.

Pairs with the Breeze app v2.0.0 prerelease (APK) for the redesigned UI. Built from overhaul @ 6d477ab.