v1.9.0

What's Changed

• feat(web): move protection save button to top right with dirty state tracking by @jiashuoz in #995
• feat(blog): add 'Your approval gate shouldn't live in your agent's code' by @jiashuoz in #997
• fix(sendramp): make a disabled sending ramp a true no-op by @jiashuoz in #996
• feat(sending): compose ramp with protection gate by @jiashuoz in #992
• feat(outbound): require single-use provider authorization (B5) by @jiashuoz in #998
• feat(outbound): enforce sending policy at fire time (B6) by @jiashuoz in #999
• feat(outbound): close the provider seam for every sender (B7) by @jiashuoz in #1000

Full Changelog: v1.8.9...v1.9.0