Norm 0.25.0

Known limitation: the Linux archive has a 0700 top-level directory. The 0.25.0 APT package inherits this mode, so a fresh system installation cannot be run by an ordinary user. Upgrades from 0.24.0 may retain accessible permissions. Norm 0.25.3 fixes the directory permissions; the published 0.25.0 assets remain unchanged.

已知限制：Linux 归档顶层目录权限为 0700，0.25.0 APT 包继承了此权限，导致全新系统安装后普通用户无法运行；从 0.24.0 升级可能保留原有可访问权限。Norm 0.25.3 已修复目录权限，已经公开的 0.25.0 资产保持不变。

The generated board.norm in 0.25.0 also references micronaut.web@7, whose package publication failed; that generated sample cannot resolve its dependencies. Norm 0.25.3 uses published library packages.

此外，0.25.0 生成的 board.norm 引用了未成功发布的 micronaut.web@7，因此无法解析完整依赖。Norm 0.25.3 使用已发布的库包。

Version record: https://normlanguage.github.io/Norm/versions/0.25

The Windows and macOS binaries are not code-signed yet, so the operating system may display an origin warning. Verify downloads against SHA256SUMS and the attached build provenance.

What's Changed

• Add application and OpenAI features with a unified Maven release pipeline by @w0fv1 in #37
• Select Native Image modules from JAR metadata by @w0fv1 in #46
• Track system JAR identity across RPM updates by @w0fv1 in #47
• Stabilize Fedora build validation and process cleanup by @w0fv1 in #48
• Add signed APT packaging and validation by @w0fv1 in #49
• Preserve Debian package modes across umasks by @w0fv1 in #50
• Add signed private-runtime RPM repository tooling by @w0fv1 in #51
• Package APT archive key for managed upgrades by @w0fv1 in #52
• Keep Fedora RPM trust current across certificate renewal by @w0fv1 in #53
• Restore Gradle as the unified build and release entry by @w0fv1 in #54
• Configure dependency updates for Gradle builds by @w0fv1 in #55
• docs: make documentation English-first with complete Chinese translations by @w0fv1 in #57

Full Changelog: v0.24.0...v0.25.0