0.4.3's tag build failed on py3.12 (test_capabilities_envelope) because
make contract ran before the version bump landed; fixed here, failed tag
stays put per house precedent (bump instead of rewriting a pushed tag).