chore(main): release 0.15.1-rc.3

[github-actions]

🤖 I have created a release beep boop

0.15.1-rc.3 (2026-05-17)

Fixed

• api,workers,ci,graph: codex r2 reconcile — platformStats non-admin regression + DNS bound comment + yq install + filtered.go file comment (c5b9c27)
• orchestrator,db: close pre-existing flaky-test class + CA-183 ctx-threading miss (89fefbf)
• rest,graph,web: codex r2 reconcile — CA-518 sweep pruning + canary positive path in line + import try/finally (1331b6a)
• web: restore aria-label on InFlightPagesPanel warn-dot (18909e3)

Changed

• auth,rest: cohesion accessor + secondsString cleanup + loginBucket sweep + doc drift (CA-505, CA-516, CA-517, CA-518, CA-502, CA-513) (dd66b00)
• rest: promote localAuthUsername to package constant + remove unreachable secondsString branch (D-L1, X-L1) (83b862c)

Documentation

• 2026-05-16-deliver-audit-remediation: CHANGELOG + CLAUDE.md + installation + llm-config (4dd368c)
• CLAUDE.md,CHANGELOG.md: document 2026-05-17 audit remediation campaign (4001233)
• README: bump kustomize overlay example from v0.12.0 to v0.14.0-rc.3 (f69232d)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• v0.15.1-rc.3

🌻