v0.5.0-beta.2

Beta upgrade notes

• Legacy Gateway hosts must configure a visitor secret of at least 32 bytes; the ephemeral secret is for explicit development use only.
• PHP returns 503 when its default limiter storage or a custom limiter is unavailable. Windows hosts need an atomic shared limiter unless deliberately disabled; PHP image concurrency still requires verified private storage.
• Images use a bounded backend proxy and approved sources. Workers can optionally proxy same-origin files from explicitly public Assets directories; that binding bypasses site middleware and must never expose private files. Sibling same-zone hosts remain restricted.
• Optional page context is disabled by default and requires visitor consent and Gateway/CCP support for v1.

This is a prerelease. Authenticated credential handoff, Windows-backed image locking, and deployed end-to-end verification remain open.

What's Changed * fix: support public Worker image assets by @mrgoonie in #43 * chore(release): prepare 0.5.0 beta 2 by @mrgoonie in #44 Full Changelog: v0.5.0-beta.1...v0.5.0-beta.2