v0.15.0

What's Changed

• fix: the review gate names the worktree, not just the branch by @scharissis in #231 (closes #219)
• fix: narrate one session-started/finished per run, not per dequeued prompt by @scharissis in #232 (closes #224)
• chore: SHA-pin the actions, add Dependabot, and turn on the free GitHub security checks by @scharissis in #233
• fix: scale the review gate's level to the diff size by @scharissis in #234 (closes #225)
• fix: sum the per-turn fields across a run's result events by @scharissis in #235 (closes #227)
• fix: name the resumable session when a limit wait is interrupted by @scharissis in #236 (closes #218)
• feat: polako plan skeleton — dispatch, flags, preflight, probes, -dry-run by @scharissis in #237 (closes #102)
• feat: polako plan runs the skill, with the label pass and the issue cap by @scharissis in #238 (closes #103)
• feat: the plan record and the proposed notify event by @scharissis in #240 (closes #104)
• feat: the pricing line — history prices the plan report by @scharissis in #241 (closes #105)

Full Changelog: v0.14.0...v0.15.0