v0.130.0

What's Changed

• feat(changelog): split CHANGELOG.md into dated monthly archives (#2437) by @mabry1985 in #2438
• test(windows): reclaim 2 files onto the native gate (#2412 phase 5) by @mabry1985 in #2442
• feat(persona): untooled-action audit — warn when SOUL.md commits to actions no bound tool backs by @mabry1985 in #2443
• fix(oauth): credential lifecycle — cancel, disconnect + revoke, serialized refresh (#2440, #2441) by @mabry1985 in #2444
• ci(checks): cancel superseded runs + skip Windows on drafts — stop billing every push by @mabry1985 in #2445
• feat(schedule): finish the New/Edit dialog builder — validation + sticky preview + edit builder (#2159) by @mabry1985 in #2439
• fix(review): build the published review from blocks, never echo model text by @mabry1985 in #2447
• test(windows): burn down the entire "path semantics" exclusion group (#2412) by @mabry1985 in #2446
• fix(media): harden the URL-signing key to owner-only on Windows (#2448) by @mabry1985 in #2451
• test(windows): burn down the process-lifecycle exclusion group (#2412) by @mabry1985 in #2450
• feat(execute_code): port the tool-RPC bridge to a loopback socket — runs on Windows (#2449) by @mabry1985 in #2453
• fix(acp): correct agent-death reporting on Windows — empties the #2412 ledger (#2452) by @mabry1985 in #2454

Full Changelog: v0.129.0...v0.130.0