chore(main): release 0.2.0

[panicboat]

🤖 I have created a release beep boop

0.2.0 (2026-07-07)

Features

• flux: grant monorepo GitRepository write access via GitHub App (#436) (c919ee8)
• github/branch: allow GitHub App bypass for monorepo main ruleset (#445) (4503a81)
• migrate application to dystopia.city + unify ALB IngressGroup (#433) (43ebbd5)
• scripts: post-flight Pod Identity injection probe + #25 upstream block note (#419) (faca8f7)
• unify aws resource provenance tag schema across iac + k8s controllers (#427) (fc04183)

Bug Fixes

• aws/ai-assistant: drop GitHubOrg + GitHubRepos tags from actions role (#429) (71d6f46)
• aws/eks: grant eks:ListPodIdentityAssociations to eks-admin role (#420) (93f9fef)
• aws/eks: grant ExternalDNS IAM access to dystopia.city zone (#435) (70a2dd1)
• aws/karpenter: set force_update_version on system_critical MNG (#432) (3a519a8)
• cilium: exclude cilium-envoy from system_critical MNG nodes (#423) (fd9cc60)
• flux: AWS Secrets Manager property names to snake_case (#444) (70b8c33)
• flux: ExternalSecret apiVersion v1beta1 -> v1 (#442) (8fdeecf)
• flux: K8s Secret keys to camelCase for source-controller compatibility (#443) (7461e9a)
• scripts/eks-lifecycle: sweep orphan EBS / Route53 in teardown chain (#452) (8432d24)
• terraform: pin required_version to 1.11.6 across multiple modules (#428) (fd0626b)

Reverts

• PR #423 cilium-envoy tolerations override (#434) (23d4eb1)

---

This PR was generated with Release Please. See documentation.