release: v0.6.0

First release since v0.5.1 back in June, and it's a big one -- 107 commits.
Highlights: the Galaxy page-sync / GxIT work, the remote-only web runtime, pi
0.84 with the 5-series models, OAuth sign-in driven off the provider registry,
and smoke:pack in CI, which promptly earned its keep by catching a broken
fresh-install resolve before it shipped.

Merge pull request #346 from dannon/galaxy-mcp-1.9-bump

Bump galaxy-mcp pin to >=1.9.0 for the Pages tools; cut 0.5.1

Merge pull request #337 from galaxyproject/fix/win32-zip-defer-squirrel

Ship Windows as a portable .zip; defer the Squirrel installer

release: v0.4.1

Raise the galaxy-mcp floor from >=1.6.0 to >=1.8.0 so Galaxy tools can rely
on 1.8's behavior rather than tolerating any >=1.6 server: workflow input
validation (datatype/collection mismatches caught before invoke), the
get_workflow_input_template run guide, and user-defined tools working again
on Galaxy 26.0. uvx already resolves the newest version, so this only raises
the guaranteed minimum.

Declare marked and dompurify as root devDeps so the publish job's tes…

…ts load

The release publish-npm job only installs root deps, but the chat-panel tests
import app/src/renderer/chat/markdown.ts, which pulls in marked and dompurify.
dompurify wasn't reachable from the root install, so prepublishOnly's npm test
couldn't even load those two files and the publish bailed out. marked happened
to resolve via a transitive copy, but pin it here too so a future hoist change
doesn't trip us again. Also syncs the lockfile version fields to 0.4.0.

Loom 0.3.1

Merge pull request #163 from dannon/release-0.3.0

chore: cut 0.3.0 -- update mechanism (CLI notice + Orbit auto-update), Opus 4.8 + pi 0.78

chore: cut 0.2.0 -- feedback capture + local-write safety

chore: cut 0.1.1 -- first signed + notarized macOS installers

chore: cut 0.1.0 -- first non-prerelease (publishes to the npm latest…

… tag)