chore: release v0.5.0

[avrabe]

Summary

Bumps the workspace from 0.4.0 → 0.5.0. CHANGELOG entry added.

What's in 0.5.0

3 issues closed (#94 partial, #103, #118).

Added

• P3 async foundation (P3 async lowering: transform stream<T>/future<T>/async exports to RFC #46 host intrinsics #94 / feat: P3 async lowering — foundation + stream<T> e2e (partial #94) #124, partial): documented host-intrinsic ABI + detection layer + ADR-1. Lowering pass tracked as P3 async: lowering pass — rewrite (canon stream.*) to pulseengine:async imports (sub-#94) #120.
• Criterion benchmarks (Add criterion benchmarks for fusion pipeline (regression gate) #103 / feat: criterion benchmarks for fusion pipeline (closes #103) #123): parser/merger/resolver/end-to-end groups, CI compile-only smoke, rivet TEST-BENCH-* artifacts.

Fixed

• Parser slice OOB on truncated component-section input (Parser slice OOB on truncated component-section input (found by cargo-fuzz) #118 / fix: parser rejects truncated component-section input cleanly (closes #118) #125): cargo-fuzz finding from v0.4.0; checked_section_slice helper, regression test, libFuzzer corpus seed. LS-P-5 approved.

Pre-release Mythos pass

Tier-5 + tier-4 files changed since v0.4.0: parser.rs only. Scanned; no confirmed findings.

One unverified hypothesis flagged for the next pass (3 sibling reader.range() sites in parse_core_module of the same class as LS-P-5; surface narrowed by the outer module bounds check). The 2026-05-20 verification routine will revisit.

Test plan

• cargo test --release — green (181+73 + new p3_async_lowering)
• cargo bench --no-run — clean compile
• cargo clippy --all-targets -- -D warnings clean
• cargo fmt --check clean
• CI green on this PR
• Tag v0.5.0 after merge

Branch

release/v0.5.0 head 1b6e216 — 1 commit on top of main.