Release Indie Payment Kit v0.3.0 public beta

[erickkkyt]

Summary

• Upgrade the public plugin and skill to v0.3.0.
• Add project inspection, provider-source orchestration, safe materialization, lifecycle templates, and expanded provider metadata.
• Harden provider-pack copying against nested symlinks and make generated checkout routes fail closed by default and in production.
• Add retry-lease semantics for payment events and expand regression coverage.

Verification

• npm run verify — 43/43 tests passed
• Skill validation passed
• Plugin validation passed
• git diff --check passed
• Codex Security full scan — 53/53 files covered, 0 reportable findings

Release boundary

This is an orchestrated public beta. Official provider sources and selected entry names were checked, but no live provider sandbox payment or production payment lifecycle was executed, so no provider is marked sandbox-verified.