chore(main): release 0.5.0

[github-actions]

🤖 I have created a release beep boop

0.5.0 (2026-07-05)

Features

• gl: sanctioned iCaptcha client flow + secure git lifecycle (#138) (06388ec)

Bug Fixes

• gl: sign the CLI's /ipfs/pins reads under the #134 auth gate (#146) (20d6848)
• node,git-remote: gate receive-pack advertisement, sign client fetch/push (#119) (6f36fc0)
• node,gossip: route gossip HTTP through the no-redirect client (#93) (#140) (563c456)
• node: close two spam-vector root causes (trust upsert + ungated push) (#152) (2df6ff9)
• node: gate GET /ipfs/{cid} on reachable allowed-set, not deny-set (#126) (#133) (466a550)
• node: gate the ref-updates feeds on read visibility (#112, #114) (#143) (4891db3)
• node: prefer canonical repo row over mirror row in get_repo (#124) (#141) (6c95592)
• remote: include HTTP error response body (#137) (09a0cb2)
• repos: log the cause when repo create fails (#103) (2620e97)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• v0.5.0

🌻