v0.3.0

What's Changed

• chore: sync v0.2.1 release state back to dev by @zzqDeco in #72
• feat: wire real permissioned CLI composition by @zzqDeco in #79
• feat(authz): reconcile catalog claim tuples by @zzqDeco in #80
• feat(security): protect permissioned observable surfaces by @zzqDeco in #81
• test(permissioned): prove Phase 2 acceptance by @zzqDeco in #82
• release: prepare v0.3.0 permissioned runtime by @zzqDeco in #84

Full Changelog: v0.2.1...v0.3.0