All releases

Updates to Agent_00, molten.bot.

  • Moved runtime images to Debian Trixie bases, updated Go and A2A dependencies, and added VNext Docker SBOM and provenance publishing coverage.

  • Changed production deployment back to a fast source-tag promotion with `source_tag` validation instead of rebuilding `latest`, cutting the workflow timeout to five minutes.

  • Made first-run GitHub token validation retry without `gh auth status --active` when the installed GitHub CLI does not support that flag, while restoring temporary token environment variables.

  • Checked agent-auth status for non-Claude harnesses before UI handling so configured runtimes can surface readiness consistently without starting Claude browser login.

  • Published the May 5 release rollup without changing existing historical release entries.