v0.1.0

Changelog

• d366d6d: build: distroless image, GoReleaser config and deployment examples (@neverlless)
• 661f361: feat(config): YAML config with env expansion, defaults and validation (@neverlless)
• 8575523: feat(google): paginated Directory API source with OU, domain and group filters (@neverlless)
• d8f4b32: feat(ipa): FreeIPA JSON-RPC client for provisioning and offboarding (@neverlless)
• 79ee8f7: feat(notify): SMTP welcome mails and admin summary with templates (@neverlless)
• 07857fe: feat(reconcile): run a full sync pass with parallel apply and reporting (@neverlless)
• 3c5200d: feat(reconcile): uid resolution and pure sync planning with safety brake (@neverlless)
• f598900: feat: google2ipa command with once and interval modes (@neverlless)
• 295a174: fix(config): expand ${VAR} only in values, not in comments (@neverlless)
• 5faad2d: fix(config): lowercase group names; allow ${VAR} in int and bool fields (@neverlless)
• cadb4a6: fix(google): match org units case-insensitively (@neverlless)
• 762ea36: fix(ipa): point size-limit error to the docs (@neverlless)
• 01ffa8e: fix(notify): SMTP deadlines, implicit TLS on 465, bare envelope sender (@neverlless)
• dda05f1: fix(reconcile): mail admins on aborted passes, report uid conflicts, full dry-run log (@neverlless)
• 6fc1396: fix(reconcile): never hand an account to a different person; repair half-finished locks (@neverlless)
• 341f538: fix: per-pass timeout and admin mail when a pass cannot start (@neverlless)
• f18ed90: fix: review follow-ups (example config, docs, release tags, dockerignore) (@neverlless)