chore(release): 0.2.0

[mlieberman85]

Summary

Prepares the 0.2.0 release.

• Bumps the five public packages (packaging/pypi/public-packages.txt) to 0.2.0.
• Every package now requires darnit-core>=0.2.0, whose new APIs they use (step-type settings and ceilings, the remediation engine).
• Moves [Unreleased] in the CHANGELOG to ## [0.2.0] - 2026-10-05.
• Regenerates uv.lock.

It is a minor bump because the release includes breaking changes:

• operator configuration and trust (040);
• the result authority contract (041);
• candidate integrity (042);
• remediation safety (043);
• closing the remaining false-PASS paths (044);
• removal of repository .baseline.toml support.

All of it is detailed in the CHANGELOG.

Merge order

1. ci(release): publish from the protected release environment with project-scoped tokens #558 (release environment gate) first.
2. Then the five PYPI_TOKEN_* release environment secrets, as described in ci(release): publish from the protected release environment with project-scoped tokens #558. Without them the publish jobs fail with a 403.
3. Then this PR.
4. Then tag v0.2.0 on the merge commit, which runs release.yml. A reviewer approves the publish jobs in the release environment.

Type of Change

• Bug fix (non-breaking change fixing an issue)
• New feature (non-breaking change adding functionality)
• Breaking change (fix or feature causing existing functionality to change)
• Documentation update
• Refactoring (no functional changes)

This PR is a version bump. The breaking changes it releases are already on main.

Testing

• Tests pass locally (uv run pytest tests/ -v): 5111 passed, 26 skipped
• Added tests for new functionality (if applicable)
• Linting passes (uv run ruff check .)

The release preflight's version-parity check, run against public-packages.txt, reports 0.2.0 for all five packages.

AI assistance

• No AI assistance was used
• AI assistance was used

Prepared with Claude (Claude Code, claude-opus-5-5); this description was drafted with Claude. The commit carries an Assisted-by: Claude:claude-opus-5-5 trailer.

🤖 Generated with Claude Code