Release v0.2.3

[SiteRelEnby]

Cuts v0.2.3 from current main. Pure version-bump + changelog rollup; no code changes.

What's in this release

Accumulated since v0.2.2 (already merged into main):

• Dedupe custom field definitions on re-import #75 Custom field dedup on re-import
• Step-up auth on image delete + show where an image is referenced #76 Image delete step-up auth + file references view
• Enforce member cap on imports + warn before exceeding it #77 Import member-cap enforcement (warn + hard-fail) + GET /v1/members/limit
• Fix API-key scope wiring: polls UI, dedicated messages scope, no key self-minting #79 API-key scope wiring: polls UI, dedicated messages:* scope, no key self-minting
• Changelog: record unreleased work (image delete, file references, member cap, API-key scopes) #80 Changelog backfill
• More responsive modals + cap member picker height #81 Responsive modal widths + member picker height cap
• Show Re-issue activation link for mobile_push channels too #82 Re-issue activation link for mobile_push channels

Bumped

• pyproject.toml: 0.2.2 -> 0.2.3
• uv.lock: regenerated via uv lock (sheaf package entry only)
• web/package.json: 0.2.2 -> 0.2.3
• web/package-lock.json: regenerated via npm install --package-lock-only (root + packages."")
• CHANGELOG.md: [Unreleased] content moved into [0.2.3] - 2026-05-26, with More responsive modals + cap member picker height #81 and Show Re-issue activation link for mobile_push channels too #82 entries added since they merged after the backfill

Tag

v0.2.3 is signed and tagged locally on the release commit. I'll push it after this merges:

• normal merge commit -> the release commit is reachable, push git push origin v0.2.3 as-is
• squash merge -> re-tag the squashed merge commit, then push

No migrations.