Release Flowlight 0.15.2

[blessdyb]

Summary

• repair upgraded managed-pack activity tables by validating the physical SQLite UNIQUE key instead of trusting the migration marker
• preserve exact/suffix provenance and exactly-once delivery while keeping editor saves, exceptions, previews, and installed-app discovery truthful under partial failures
• release host app 0.15.2/38 while keeping the unchanged Network Extension pinned at 0.15.0/23
• supersede Release Flowlight 0.15.1 #50 while retaining its immutable 0.15.1 ancestry

Local release gates

• focused installed-app/managed-pack suite: 42 tests, 0 failures
• full suite: 705 tests, 0 failures
• production-shaped stale database: expected pre-migration ON CONFLICT failure; repaired key, both secondary indexes, marker 2, 49 ordinary rules, and existing watermark preserved
• exact/suffix rows remain separate; repeated suffix writes aggregate; reopen is idempotent
• release-like universal candidate: host 0.15.2/38, embedded filter 0.15.0/23, strict code-sign verification, visible launch
• localization: 1,588/1,588 keys in all ten catalogs
• generated site: 53 pages, 0 problems; 0.15.2 release notes extracted successfully
• independent high-effort review: no remaining findings after remediation

Release sequencing

The immutable v0.15.2 tag will be created only after checks and review pass on the exact PR SHA. Signed dry-run, notarized production artifacts, independent download verification, installed-artifact acceptance, and Homebrew verification must pass before this PR is merged.

🤖 Generated with Claude Code