chore(release): bump main to 0.10.0 and cut the changelog entry

[pat-lewczuk]

What

Prepares main for the 0.10.0 release: stamps the version across the release set and turns the accumulated # Unreleased block into a real release entry.

Version — contract, api-client, cezar, web and alias-cezar go 0.9.2 → 0.10.0, intra-release ranges rewritten to ^0.10.0, lockfile regenerated (npm ls resolves all four workspaces locally at 0.10.0). The alias's pin was stale at ^0.8.0; scripts/release.mjs asserts it at publish time, so this only makes the repo read as what a publish would produce. packages/cezar/package.json is what CI reads as the base, so the Release workflow can publish this with the existing bump.

A minor rather than a patch because CEZ_AUTOMATIONS (#801, #802) changes an existing default.

Changelog — # Unreleased becomes # 0.10.0 (2026-08-14):

• condensed the three essay-length entries (All tasks + project tags, reference status chips, agent accounts) to a paragraph each, keeping the load-bearing facts — spec paths, GET /api/v1/github/ref-status, the optional tags on PATCH /api/v1/projects/:id, ~/.cezar/agent-accounts.json
• added the ~30 PRs that merged since the 0.9.2 sync with no changelog note at all: the pi runner (feat: add the pi runner and canonical provider/model identity for pi #470), auto-resume after a provider usage limit (feat(runs): auto-resume tasks after a provider usage limit #778), the agent-account picker on the GitHub hand-off (feat(github): pick the agent account when handing an issue or PR to the agent #878), progressive history (feat(history): progressively load long sessions #739), foldable columns (feat(ui): add foldable task table columns #743), the project General page (feat(settings): General page for the project you are inside #772), sidebar task names (feat(cockpit): readable task names in the sidebar quick-list #789), model identity on the agent badge (modelIdentity is write-only — surface it to a consumer or document why it is persisted #546), toasts (feat(ui): animated top-right toast stack #820), plus the fixes (npx cezar-cli startup crash, SIGKILL escalation, diff anchoring, per-task TMPDIR, composer git state, monitor resume, and the rest)
• promoted CEZ_AUTOMATIONS to a ⚠️ Breaking entry — automations used to run for any project with a GitHub remote and are now off by default
• fixed the structure: the section carried a stray ### 🐛 Fixes above Features and a second ## 🐛 Fixes below, now one Fixes section plus Changed / CI-CD / Docs
• credited the seven contributors, handles verified against commit authorship (and gh for the two plain-email authors)

Every PR merged to main since the 0.9.2 sync commit now has an entry.

Deliberately not done

The 0.9.2 section is left exactly as it is. It holds entries for #773 and #776, which merged after the tag — relocating them is a separate cleanup, not part of a version stamp.

Verification

• npx vitest run packages/cezar/src/release — 2 files, 32 tests, pass
• npm ls @open-mercato/* — all workspaces link locally at 0.10.0
• No code changes; version metadata and CHANGELOG.md only

🤖 Generated with Claude Code

https://claude.ai/code/session_015hFfZiw7rTYoPaKj9mRpVr

[github-actions]

📦 npm preview published — 0.10.0-pr892.1298

Try this PR build (exact pinned version — copy-paste as-is):

npx cezar-cli@0.10.0-pr892.1298                                # cockpit at http://localhost:4321
npx cezar-cli@0.10.0-pr892.1298 run "…"                        # headless run
npx cezar-cli@0.10.0-pr892.1298 server-deploy --platform <id>  # roll a server to this exact build

Also tagged: npm install -g cezar-cli@pr-892 (moving tag for this PR).
Packages: cezar-cli@0.10.0-pr892.1298 → @open-mercato/cezar@0.10.0-pr892.1298 → @open-mercato/cezar-api-client@0.10.0-pr892.1298 (provenance attested).