Release v0.9.4

Release 0.9.3

See CHANGELOG.md for the full list of user-facing changes.

v0.9.2

ADO AAD bearer-token auth, Governance Guide, single-authority Merge Gate.
See CHANGELOG.md for full notes.

Release v0.9.1

Release v0.9.0

Release v0.8.12

v0.8.11 — security fix, Windows compat, scope-aware hooks

Security:
- Reject symlinked primitive files to prevent traversal attacks (microsoft#596)

Fixed (14 fixes):
- Hook deployment scope-awareness (microsoft#565, microsoft#566)
- Windows CP950/CP936 encoding crashes (microsoft#591)
- PowerShell 5.1 Join-Path compatibility (microsoft#593)
- Marketplace GITHUB_HOST for GHE users (microsoft#589)
- compilation.exclude primitive discovery leakage (microsoft#477)
- Script runner false-positive runtime detection (microsoft#563)
- Missing applyTo warning across all compile modes (microsoft#449)
- Remote default branch detection (microsoft#574)
- Duplicate skill name warnings (microsoft#545)
- auto_create directory guard (microsoft#576)
- deps update -g scope passthrough (microsoft#562)

chore: bump version to 0.8.10 (microsoft#560)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>