v0.9.0

Added

• Launch and resume Claude Code through Orchestra with persistent repository, branch, session, and W3C trace attribution.
• Account for session requests through existing customer trace and billing APIs without exported transcripts. Failed calls, missing prices, capture gaps, and unknown attribution remain explicit.
• Link sessions to GitHub pull requests and refresh merge evidence automatically; optionally verify captured request and response payloads in private local files.

Fixed

• Run protected private-term scans before npm publication, matching the existing maintainer release requirements.
• Handle large bundled-package manifests and validate public dependencies against their lockfile identities without applying first-party content rules to upstream examples.