v0.3.3

What's Changed

• Property-based testing + security hardening (fast-check) by @dydx in #26
• Security track S-3: egress credential-scope hardening (reject * in host derivation) by @dydx in #27
• Make work:base the default runs-on by @dydx in #28
• Testing strategy review + remediation by @dydx in #29
• chore(deps): pin dependencies by @renovate[bot] in #16
• ci: drop redundant test-unit job (don't run the suite twice) by @dydx in #30
• chore(deps): lock file maintenance by @renovate[bot] in #31
• chore(deps): update dependency knip to v6.17.1 by @renovate[bot] in #32
• chore(deps): update eslint toolchain to v8.61.1 by @renovate[bot] in #33
• chore(deps): lock file maintenance by @renovate[bot] in #34
• release: v0.3.3 by @dydx in #35

Full Changelog: v0.3.2...v0.3.3