v0.0.1-rc.8

What's Changed

• fix: eliminate panics and enforce unwrap/expect lints workspace-wide by @bordumb in #25
• feat: OIDC-to-Policy bridge and Trust Registry by @bordumb in #26
• feat: schema stability, batch git storage, and pairing protocol extraction by @bordumb in #27
• feat: PKCS#11 HSM backend + Python E2E test system by @bordumb in #28
• fix: resolve 25 E2E test gaps — 10 pass → 31 pass by @bordumb in #30
• feat: add auths-mcp-server integration tests and cleanup by @bordumb in #31
• feat: unified auths-python SDK with identity lifecycle by @bordumb in #32
• feat(python): Python SDK advanced lifecycle & semantic naming (fn-25) by @bordumb in #33
• feat: advanced enterprise features (fn-26-30) by @bordumb in #34
• refactor: tear out CLI business logic into SDK and http infra crates by @bordumb in #35
• feat(auths-python): publish_artifact and generate_allowed_signers by @bordumb in #36
• feat(auths-sdk,auths-core,auths-cli): stabilize core architecture & error boundaries by @bordumb in #37
• feat: code safety — unwrap/anyhow removal (fn-34) by @bordumb in #38
• refactor(auths-sdk,auths-cli): API surface — initialize(), rename SDK functions by @bordumb in #39
• feat: native commit verification in Rust (fn-36) by @bordumb in #40
• feat: structured error codes across FFI/WASM/Python boundaries by @bordumb in #41
• fix: clock injection, typed errors, and missing Python imports by @bordumb in #42
• fix(auths-cli): rename global --output to --format by @bordumb in #43
• refactor: security hardening by @bordumb in #44
• refactor: simplify CLI and SDK interfaces by @bordumb in #45
• feat: verification via SAS and transport encryption for device pairing by @bordumb in #46
• fix: clean up auths --help and rewrite CLI README by @bordumb in #47
• feat: add auths pair as a top-level command by @bordumb in #48
• docs: add CLI commands section to mkdocs nav by @bordumb in #49
• docs: add full descriptions to CLI docs by @bordumb in #50
• feat: working demo with radicle by @bordumb in #51
• release: release candidate 8 by @bordumb in #52

Full Changelog: v0.0.1-rc.7...v0.0.1-rc.8