Release v3.6.37

What's Changed

• fix(provider): run maintenance-mode short-circuit before constructing Tasks by @forgetso in #2672
• fix(caddy): serve /robots.txt as 200 instead of 308 redirect loop by @goastler in #2674
• feat(dm): expose ipInfo to verify-phase decision machine by @forgetso in #2675
• feat(access-rules): deferToVerify flag for Block policies by @forgetso in #2679
• feat(captcha): lifecycle timestamps + submit→verify recency window by @forgetso in #2681
• feat(user-access-policy): support IPv6 in access rule input transforms by @forgetso in #2683
• fix(access-rules): explicit ZodType annotations by @forgetso in #2684
• Release v3.6.37 by @prosoponator-app[bot] in #2685

Full Changelog: v3.6.36...v3.6.37