chore(release): v0.3.2-alpha.1

[thinmintdev]

Summary

End-of-stream cut for v0.3. Closes the v0.3 milestone cleanly so v0.4 + v0.5 can start with clean scope.

Bundles since v0.3.1-alpha.1:

• MCP completion + memory-map redesign (feat(dash): wire /agent + tabs to real backend (closes #207 #228 #227 #226) #364–feat(dash,pve): MemoryMap redesign — GTT-first, Proxmox-aware, sidebar + hardware page #370)
• Settings → Updates fix (fix(updater,dash): surface apply errors + auto-recover stale install dir #386)
• Async-job polling contract docs (docs(plan,changelog): record updater fix + async-job polling contract #387)
• Internal docs pin + dashboard-v3 walkthrough (docs(internal): pin v0.3 state, add ADR-0015 + ADR-0017, refresh release-manifest #389, docs(operate,dashboard,installer): Lemonade ref + dashboard v3 walkthrough + installer auth gut #390)
• Dispatcher silent-eviction recovery (fix(dispatch): recover slot after silent Lemonade eviction #392)
• ADR-0020 OpenRouter callback skeleton (docs(adr,openrouter): ADR-0020 — localhost-callback-only OAuth PKCE (Phase 0 prereq) #409)
• δ-harness Hermes `delegate_task` coverage (test(harness,agents): δ-harness coverage of Hermes delegate_task (3 backends) #410)
• Per-persona spending-cap primitive (feat(agents,budget): per-persona spending-cap primitive (OpenRouter Phase 0) #411)

The v0.3.0-alpha.2 Hermes integration sweep (#393–#405, #408) was documented under its own CHANGELOG section by the parallel sessions; no double-counting here.

Post-merge

1. `git tag -a v0.3.2-alpha.1 -m '…'` on `main` once merged
2. `git push origin v0.3.2-alpha.1` — `release.yml` workflow auto-builds + uploads + cosign-signs
3. Create `v0.4` and `v0.5` labels + milestones
4. Bulk-retag the 29 open `v0.3` issues per the agreed split: 18 → v0.4 (UI polish + install reconciliation), 6 → v0.5 (MCP wiring), rest cleanup

Notes

• CHANGELOG had two coexisting `## Unreleased` blocks (parallel sessions appending rather than editing in-place); this PR merges them into one `[v0.3.2-alpha.1]` section.
• `uv.lock` was stuck at `0.3.0a1` from prior drift; `uv lock` resynced it to `0.3.2a1` as part of this commit.
• Per `hal0_release_prerelease_flag_bug` memory: `release.yml` hard-codes `--prerelease=false` and `--latest` for pre-v1.0 alpha tags. Tagging behaves as expected.

Test plan

• `ruff format --check` + `ruff check` clean
• `uv lock` resync clean
• CI green on the release branch
• Smoke: tag triggers `release.yml` → builds tarball + sig + cert → publishes GH release with `/latest` badge

🤖 Generated with Claude Code