chore(release): promote develop → main (v0.9.3)

[saadqbal]

Promotes the v0.9.3 payload from develop to main.

Contents since v0.9.2 (12 commits): the #339 home-heartbeat fix (fetch one client via GET /edge-device/{id}/ instead of listing the whole account), plus the dependency/CI wave — cobra 1.10.2, k8s 0.36.2, progressbar 3.19.1, kind-action 1.14, action-gh-release v3, artifact-actions v7, add-to-project v2, stale v10, and the Dependabot→develop config fix.

Why a reconciled branch, not a bare develop→main: #334 (cobra) had landed on main only, and #340's back-merge was squash-merged, so the merge-base was stale and a direct promote 3-way-conflicted on go.mod/go.sum. This branch is develop merged with main favouring develop (-X ours); develop already carries cobra 1.10.2 (#340), so nothing is dropped. The tree is byte-identical to origin/develop (41ba4607), i.e. this promote == develop's content exactly.

After merge: back-merge main→develop, then tag v0.9.3.

🤖 Generated with Claude Code

---

Note

Medium Risk
The heartbeat path change affects every client status poll and delete guard; behavior is well-tested but touches core API/CLI flows. Dependency and workflow bumps are routine but span release and e2e pipelines.

Overview
v0.9.3 promote bundles the home-screen heartbeat fix (cli#338) with dependency and CI maintenance.

Client status no longer lists every account client to resolve the active machine. It adds GetClient (GET /edge-device/{id}/) and routes lookupClientStatus (and client status --wait, delete pre-offboard checks) through that single fetch so polling stays within the ~1.2s budget. 404 is treated as “not in account”; invalid non-numeric active IDs fail fast instead of polling to timeout. findClientByID is removed.

Dependencies: k8s.io/* 0.36.1 → 0.36.2, progressbar 3.19.1, go-isatty patch bump (go.sum).

CI / automation: Dependabot target-branch: develop (documented); workflow pins bumped (upload/download-artifact v7, kind-action 1.14, action-gh-release v3, add-to-project v2, stale v10).

^{Reviewed by Cursor Bugbot for commit bfdbe0b. Bugbot is set up for automated code reviews on this repo. Configure here.}

[LukasWodka]

👋 Heads-up — Code review queue is at 35 / 30

Above the WIP limit. The team convention is to review existing PRs before opening new work.

Open PRs currently in Code review (oldest first):

• averaging-service#183 — docs: SafeTensors deployment-order & resume-safety runbook (epic feat(auth): logout revokes the token server-side (cli#112) #116) · author: @shujaatTracebloc · reviewer: @saadqbal
• averaging-service#184 — test(weights): shared SafeTensors golden-corpus drift guard + declare safetensors dep (SEC-03) · author: @LukasWodka · no reviewer assigned
• averaging-service#185 — test(weights): average a real SafeTensors edge + a legacy edge in one cycle — SEC-03 §8 · author: @LukasWodka · no reviewer assigned
• backend#1122 — perf(api): cache the anonymous competition-template list (#981 item 4, part 2) · author: @aptracebloc · no reviewer assigned
• backend#1127 — perf(auth): throttle ClientAccessToken last_used_at write (#981) · author: @aptracebloc · no reviewer assigned
• client#356 — main -> Stop prompting for location during registration, auto-derive from timezone · author: @saadqbal · no reviewer assigned
• data-ingestors#361 — feat(ingest): emit per-column feature_stats for combine-time normalization (Redesign tb resources: two-line view (secure environment + per-run allocation) #360) · author: @divyasinghds · no reviewer assigned
• data-ingestors#372 — fix(validators): use redaction.column_preview for mask_id error column lists · author: @divyasinghds · no reviewer assigned
• design-system#63 — fix(Input): inline icon SVGs so the published bundle renders them (fix(install.sh): persist PATH to the shell rc (parity with install.ps1) #61) · author: @LukasWodka · reviewer: @waqaskhanroghani
• design-system#67 — feat(tooltip,button): Tooltip portal prop + Button variant="cta" with link root · author: @waqaskhanroghani · no reviewer assigned

Pull from review before opening new work. (This is a nudge from the kanban WIP check, not a block.)