Features
- security hardening — CI pipeline, runtime security, and documentation
- add Prometheus metrics instrumentation and ServiceMonitor/PodMonitor
- add service config, extraContainers, commonLabels, ingress pathType
- replace listener exec probes with HTTP health endpoints
- add values.schema.json with CI validation
- production hardening — security contexts, validations, and extensibility
- add configurable rolling update strategy with surge-first default
- add default pod anti-affinity for HA replica spreading
Bug Fixes
- use print() for bootstrap credential output
- use templated security contexts in migration and bootstrap jobs
Documentation
- fix inaccuracies and add metrics/observability documentation
Other Changes
- deps(web): bump @types/node from 25.3.5 to 25.4.0 in /web (#39)
- deps(python): update prometheus-client requirement in /services (#38)
- deps(ci): bump aquasecurity/trivy-action from 0.34.2 to 0.35.0 (#37)
Full Changelog: v0.1.7...v0.2.0