v0.9.2

What's Changed

• feat(sync): require explicit --project on first sync; never auto-name by @usercise in #484
• fix(index): wire --batch-size through to embed phase (was a silent no-op) by @usercise in #483
• feat(login): auto-select org (or interactive selector) after no-org device login by @usercise in #485
• fix(server): serve /v1/health before loading embedder + readiness contract (oss^50, PR A) by @usercise in #486
• Consolidate tree-sitter grammars on ast-grep-language + inline ast-grep-core fallback by @usercise in #487
• spelunk-oss^50 PR B (CLI offline UX + status + firewall docs) by @usercise in #488
• spelunk-oss^49: php + ruby indexing (batch 1) by @usercise in #489
• security: suppress quick-xml DoS advisories (no upstream fix) by @usercise in #492
• feat(server): refuse non-loopback bind without an API key by @usercise in #490
• spelunk-oss^49: c# + kotlin + swift indexing (batch 2) by @usercise in #491
• ci: add docker ecosystem to Dependabot by @usercise in #493
• build(deps): bump rust from 1.94.1-slim to 1.96.1-slim by @dependabot[bot] in #494
• build(deps): bump ignore from 0.4.26 to 0.4.27 by @dependabot[bot] in #495
• build(deps): bump lopdf from 0.42.0 to 0.43.0 by @dependabot[bot] in #496
• fix(security): scan docstring+summary for secrets, not just chunk content by @usercise in #498
• docs(adr): ADR-056 OSS server tenancy model (single trust domain) by @usercise in #499
• build(deps): bump indicatif from 0.18.4 to 0.18.6 by @dependabot[bot] in #497
• security(server): ADR-056 single-trust-domain guardrails (warning + docs) by @usercise in #500
• test(secret-scanner): exercise real generate_summaries via wiremock by @usercise in #501
• Fix argument injection in spelunk memory harvest git-log calls by @usercise in #503
• fix(server): constant-time API key comparison in auth.rs by @usercise in #502
• security(cli): reject non-loopback http://, drop bearer from /v1/health probe by @usercise in #505
• fix(security): unpredictable memory-editor temp file + TOCTOU-safe read-back by @usercise in #506
• security(spelunk-server): harden DoS surface — timeouts, body/concurrency caps, input caps, /explore rate limit (spelunk-oss^60) by @usercise in #507
• security: CLI local-hardening bundle (PID-reuse, state-file perms, autoclean symlink, bun exec) by @usercise in #504
• release: cut v0.9.2 by @usercise in #508

Full Changelog: v0.9.1...v0.9.2