chore(main): release 0.2.0-preview.1

[github-actions]

🤖 I have created a release beep boop

0.2.0-preview.1 (2026-08-14)

Features

• agent: add continuous node evidence publishing (6beea93)
• agent: add standalone node evidence publisher (7129950)
• attestation: verify broker-owned node evidence (#3) (1cb5e0e)
• broker: add authenticated node evidence enrollment (#4) (e2cabef)
• broker: add SQLite-backed unseal broker (5fdf1b8)
• broker: audit node evidence admin operations (a7bce9d)
• broker: persist node evidence in SQLite (aae977d)
• cli: manage node evidence enrollment (#5) (991ff61)
• contracts: add protocol and local crypto (3f9f911)
• k8s: add fake-local node evidence publisher (1094e27)
• k8s: add workload evidence diagnostics (41e4e81)
• kms: add broker backend and multi-version local keys (7139324)
• kubernetes: add fake node evidence publisher (78bf290)
• kubernetes: add node evidence diagnostics (83725fc)
• kubernetes: add node evidence retention pruning (2e14a8b)
• kubernetes: add rbac manifests and kind verification (6886d65)
• kubernetes: add workload verifier and node evidence policy (f9ae30f)
• kubernetes: emit workload evidence from plugin (79c4086)
• kubernetes: wire runtime tokenreview and pod lookup (eafa0d1)
• lifecycle: add enrollment and recovery flows (30a4b4c)
• rotation: add key rotation and revocation workflows (319d878)
• rotation: record OpenBao restart verifications (d9096c9)
• tpm: add local TPM unseal backend (1820897)

Bug Fixes

• lint: satisfy ast-grep quality gate (181a9c6)

---

This PR was generated with Release Please. See documentation.