0.14.4 — Internal cleanup

0.14.4 — Internal cleanup

This release removes duplicated helpers and an unused re-export. Scans, BOMs,
policy evaluation and the CLI do not change.

Highlights

• Shared helpers replace three private copies. The Cursor evidence code
  reuses the Cursor resolver's extension tuples, and the skill posture rule
  reuses the shared set of agent kinds that recognize an exec. Each gives the
  same result as the copy it replaces.
• tools.component_ref no longer re-exports purl_type_for_ecosystem.
  Nothing imported it from there.

Install

uv tool install openaca==0.14.4 or pip install openaca==0.14.4.

Compatibility

Pre-V0 — no back-compatibility hedging.

• Nothing changes for a consumer. openaca.core does not change.
• openaca:schema_version stays 0.7. The BOM document shape did not
  change.
• The overlay record schema is unchanged.