nebius-cxcli-v0.1.5

• Added PR-side coverage for bootstrap-ci workflow generation across both development (main) and stable tagged (nebius-cxcli-v<version>) default CLI refs.
• Hardened bootstrap-ci to fail before writing the customer workflow when GitHub auth-bootstrap prerequisites are missing, and documented --github-repo as an override over target-repo auto-detection.
• Added explicit render profiles: generator-side validate and render now default to portable output, while --render-profile local-dev keeps checked-out Terraform module paths for workstation testing.
• Hardened generated-bundle validation and customer workflows with validate-generated --portable, so PR/apply pipelines reject non-portable local Terraform module sources before plan/apply.
• Simplified wheel/release packaging to bundle the portable catalog via the build override path instead of rewriting the working-tree root catalog during GitHub Actions builds.
• Aligned the generated customer workflow with the example repo by using a shared Python-version env and compact JSON discovery output for deterministic GitHub Actions matrix handoff.
• Added repo-side coverage that the checked-in local and portable catalogs stay semantically aligned except for Terraform module source addresses.
• Added direct tests for the validate-sources CLI command surface and GitHub environment-secret bootstrap helpers so those paths no longer rely only on indirect coverage.