v0.21.0

Features

• release: automate release preparation and direct artifacts (d357972)
• release: automate release preparation and direct artifacts (b6b444f)

Bug Fixes

• governance: resolve current-main ADR IDs (42fc79d)
• identity: require canonical GitHub repository hosts (0101e98)
• release: accept automated manifest lifecycle (bdf7112)
• release: accept automated manifest lifecycle (b4d17df)
• release: bind private App provenance to bot actor (16210d5)
• release: bind provenance to app bot actor (f86904b)
• release: bind reconciliation to exact release metadata (8576184)
• release: derive evidence downloads from observed assets (418188f)
• release: dispatch protected-main evidence after publication (571da70)
• release: keep auxiliary attestations manual-only (1fae040)
• release: keep v0.19.1 retrospective validation metadata-only (721226a)
• release: preserve generated changelog formatting (b7b5fb4)
• release: preserve generated changelog formatting (ad6fb29)
• release: reconcile draft metadata before publication (fb55f98)
• release: run post-release evidence only from protected main (652c899)
• release: support metadata-only historical subjects (dd97e2b)
• validation: align installed Architecture Compass count (d93d054)