chore(release): v0.9.0

[fclairamb]

🤖 I have created a release beep boop

0.9.0 (2026-08-07)

Features

• config-as-code CLI, SP_NODE_NAME worker identity, docs showcase media, and agent key redaction (#198) (ec971d6)

---

This PR was generated with Release Please. See documentation.

[fclairamb]

Release v0.9.0

Features

• Config-as-code for checks — sp checks export / import round-trip a catalog as YAML, sp checks diff previews what an import would change, and sp checks validate accepts a whole export document offline, so a catalog can be linted in CI with no server and no credentials.
• SP_NODE_NAME worker identity — worker identity is now a deployment decision instead of os.Hostname(). Unblocks check workers under Kubernetes hostNetwork: true, and fixes silent slug collisions between workers sharing their first 15 hostname characters. Illegal slugs now fail fast at startup with an actionable message rather than an opaque Postgres constraint violation.
• Docs Tour page — a regenerable Playwright pipeline (make showcase) records the real dashboard creating an HTTP check, published as stills plus an AV1 video.

Fixes

• Agent private keys never reach logs or stdout — printing now requires opting in via SP_AGENT_PRINT_KEYS.
• E2E specs no longer test the wrong server — both suites derive their origin from a shared fixtures module, with a lint guard against regression.
• Session-sensitive tests get a dedicated login; kubernetes-cluster cleans up on failure; ValidateDocument no longer mutates its input.

Full changelog in CHANGELOG.md.

[fclairamb]

🤖 Created releases:

• v0.9.0

🌻