Aura v0.2.0 — Production-hardened, audit-clean, fully documented

Major milestone after a 2026-05-17 marathon (32+ commits to master)
covering four sequential phases. v0.0.1 was a placeholder; this is the
first meaningful release.

- **Phase-T** — Production rollout: compose.prod.yaml overlay, git SHA
  baked from link-time, daily backup-verify cron, dashboards over
  authz_decisions + tool_attempts, docs/RUNBOOK.md
- **Phase-Z** — Bounded PRD wrap-up: content_hash drift detection,
  eager freshness invalidation, degraded_read annotation, SQLite
  concurrency hardening, source conversion fixtures (PDF/DOCX/XLSX/PPTX/MD)
- **Phase-CLEANUP1+2** — Code-health sweep: god-files split (app.go
  1151→537, hub.go 760→456, identity/store.go 875→233), dead code purge,
  duplication collapsed (stringx, llm, httputil helpers extracted)
- **4 audit rounds** — security / concurrency-leaks / error-logging /
  code-health, all clean. golangci-lint integrated (80→2 issues, both
  third-party in web/node_modules)
- **README.md** consolidated with 4 mermaid diagrams: current state,
  roadmap, multimodal target, plugin-layout target

Five channels (Telegram + Web + Cron + Swarm + Silent) → unified Chat Hub
→ single Agent Loop with capability-gated tool registry, typed memory
(Storage vs Memory per docs/MEMORY-VS-STORAGE.md), subagent dispatch with
write_proposal review queue, audit trail for every authz decision and
tool attempt.

- Phase-FIX (4 stories) — kill the bad runtime UX fallback strings
- Phase-MM (9 stories, 3 waves) — multimodal core (audio + image, IN + OUT)
- Phase-U (4-6 stories) — plugin layout (option 2: clean shape, no
  marketplace; single-author scope stays preserved)
- Phase 8 — multi-agent substrate (planner + critic + DAG) anchored to a
  concrete workload (market research candidate)

See prd.md §7.4 and docs/phase-mm-synthesis-2026-05-17.md for the full plan.