release: v0.3.2

[niansia]

Summary

• Bump the product, Agent Skill, report contract, schemas, fixtures, and runtime identifiers from 0.3.1 to 0.3.2.
• Publish the arXiv historical-version safety fix delivered in PR fix: pin arXiv evidence to historical versions #1 as a downloadable release artifact.
• Bind run_manifest.tool_version to the actual v0.3.2 runtime during report assembly.
• Update CI bundle checks to scholarly-novelty-audit-v0.3.2.zip.
• Mark Alpha releases as GitHub prereleases.
• Add a one-time publisher that creates the annotated v0.3.2 tag and uploads the ZIP plus SHA-256 only after clean Ubuntu/macOS installation and full validation.

Validation

• Release metadata preparation: 225 tests passed on GitHub-hosted Python 3.12.
• Final branch CI passed across Python 3.10, 3.11, 3.12, and 3.13.
• Agent Skills validation passed.
• Packaging safety and clean ZIP installation on Ubuntu and macOS passed.
• CLI startup and repository secret scan passed.

Release assets

After this PR is squash-merged with the commit title release: v0.3.2, the gated publisher will create:

• scholarly-novelty-audit-v0.3.2.zip
• scholarly-novelty-audit-v0.3.2.zip.sha256

The release remains explicitly labeled Alpha and prerelease.

AI assistance

Prepared and validated with OpenAI GPT-5.6 Pro; GitHub Actions is the executable source of truth.