v0.9.0

What's Changed

• ADR-037 P1: local↔cloud two-way memory sync (sync mode, UUID identity, text-only push) by @usercise in #425
• arch: ADR-005 CLI slug→UUID resolution for cloud dogfooding by @usercise in #427
• CLI: resolve project slug to UUID for cloud-routing memory servers (ADR-005) by @usercise in #428
• feat(cli): spelunk login / logout commands (ADR-037 P3) by @usercise in #430
• build(deps): bump tower-http from 0.6.11 to 0.7.0 by @dependabot[bot] in #432
• build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #431
• chore(deps): semver-compatible cargo update by @usercise in #433
• fix(cli): send JSON body on device-init so GFE doesn't reject spelunk login with 411 by @usercise in #436
• fix(login): persist token as server_key; remove redundant api_key field (#437) by @usercise in #438
• ci: fix macOS test job link failure (drop embed-native, bust stale cache) by @usercise in #440
• docs(changelog): roll [Unreleased] for the v0.9.0 cut by @usercise in #435
• feat: replace fastembed/Nomic with candle-served F2LLM-v2-330M (896-dim, Metal/GPU) by @usercise in #439
• feat(embedder): Q8_0 + int8 quantization for F2LLM (incl. #19 GQA fix) by @usercise in #441
• feat(cli): WorkOS-direct device login, token auto-refresh, org switch (ADR-047) by @usercise in #445
• docs: v0.9 embedder changelog + indexing/protocol docs by @usercise in #442
• release: cut v0.9.0 by @usercise in #447

Full Changelog: v0.8.3...v0.9.0