Minco 0.4.0

What's Changed

• docs: record Minco 0.3.1 release evidence by @xicv in #18
• docs: define Minco framework completion roadmap by @xicv in #19
• feat(plan): model API and worker deployment topology by @xicv in #20
• feat(config): add typed environment graph by @xicv in #21
• ci(release): close trusted publishing by @xicv in #22
• feat(database): add explicit migration lifecycle by @xicv in #23
• feat(db): add classified safe seeders and deterministic fixtures by @xicv in #24
• feat(dev): add graph-driven local supervisor by @xicv in #25
• feat(generator): add contract-aware generators by @xicv in #26
• feat(compatibility): add contract and upgrade reports by @xicv in #27
• feat(release): bind exact package and deployment receipts by @xicv in #28
• feat(deploy): guard CloudFormation changesets and apply by @xicv in #29
• feat(deploy): verify and promote exact hosted releases by @xicv in #30
• release: Minco 0.4.0 by @xicv in #31
• test(ci): unify Feedback browser quality gate by @xicv in #32
• fix(aws): validate SSM names portably by @xicv in #33
• fix(aws): scope Cognito tagging permission by @xicv in #34
• fix(aws): serialize CloudFormation parameters by @xicv in #35
• fix(aws): bind reviewed change-set type by @xicv in #36
• fix(aws): bind smoke stack ownership tags by @xicv in #37
• fix(aws): admit CloudFormation stage system tags by @xicv in #38
• fix(aws): authorize dependent stage tagging by @xicv in #39
• fix(aws): authorize run-owned stage creation by @xicv in #40
• fix(aws): wait for artifact bucket visibility by @xicv in #41
• fix(aws): authorize tagged HTTP API stages by @xicv in #42
• fix(aws): bind stage tag write to collection by @xicv in #43
• fix(aws): retry fresh-key role assumption by @xicv in #44
• fix(aws): authorize v2 stage tagging by @xicv in #45
• fix(aws): preserve public HTTP API routes by @xicv in #46
• fix(aws): authorize qualified Lambda aliases by @xicv in #47
• fix(aws): retry deployment-role bucket visibility by @xicv in #48
• fix(aws): strip named stage from Lambda routes by @xicv in #49
• fix(aws): normalize named-stage Lambda routes by @xicv in #50
• fix(aws): accept API Gateway request IDs in smoke verification by @xicv in #51
• fix(deploy): accept padded API Gateway request IDs by @xicv in #52
• fix(aws): authorize bounded stack drift detection by @xicv in #53
• fix(deploy): parse CloudFormation drift status by @xicv in #54
• fix(deploy): authorize CloudFormation drift reads by @xicv in #55
• fix(deploy): authorize Lambda runtime drift read by @xicv in #56

Full Changelog: v0.3.1...v0.4.0