v0.7.0

Changelog

• fix: rebuild seed before continuing first-boot vm up (#78)
• feat: unify provision networking on labeled interfaces and ethernet.vm (#77)
• fix: wait for stamp-gated QCTL_READY on serial for vm up (#76)
• fix: stop rewriting tank canary on appliance import (#75)
• feat: create lab VLAN dummy parents in guest init (#74)
• feat: thin VmDriverModule registry with create/reconcile specs (#73)
• feat: track VM first-boot via INSTALLED flag and scrub seed on success (#72)
• feat: run secret check/sync via supervisor with --app (#71)
• docs: document sudo-free quadlet and tighten supervisor ACL tests (#70)
• fix: async systemctl so ensure can run during qctl-app@ start (#69)
• feat: run quadlet ops via supervisor admin socket (#68)
• feat: seed qctl-supervisor and fix Bun Type=notify for qctl-app@ (#67)
• feat: rewrite cross-engine peer deps to qctl-app@ on install (#66)
• feat: add qctl-app@ proxy with refcounted ensure/release (#65)
• feat: add dual-socket qctl supervisor transport (#64)
• feat: persist non-secret admin identity in OsConfig (#63)

Assets

• qctl-host — workstation CLI
• qctl-guest — appliance CLI
• qctl-platform-rocky.mjs — Rocky platform module