chore(main): release 3.11.2

[jmagar]

🤖 I have created a release beep boop

3.11.2 (2026-08-02)

Fixed

• agent: harden self-update without blocking heartbeats (#156) (35ce512)
• ci: centralize release-only container publishing (#149) (3d75d10)
• ci: drop the stale gitleaks contract assertions (fd0525a)
• ci: enforce documentation and identity contracts (ab5ef39)
• correct at-limit CRLF framing and address PR review findings (76a9814)
• enforce repository contracts and reduce query module debt (aa7e991)
• filetail: distinguish append growth from replacement (#161) (337f608)
• filetail: preserve reconciled checkpoint on first open (#157) (2086823)
• finish the ghcr namespace migration and bound Gemini parse warnings (1bf8257)
• finish the ghcr namespace migration and bound Gemini parse warnings (98de4dd)
• harden transcript warnings, hostname resolution, and TCP framing (78f11d1)
• inventory: preserve results and collect DNS settings (#154) (d54194e)
• npm: resync the packaged README with the repo README (c11391d)
• publish npm launcher as @dinglebear/cortex (7b36683)
• release: use explicit npm version updater (#158) (aed693b)
• release: use scalar Cargo package versions (#162) (b951591)
• security: patch quinn and restrict workflow tokens (94bf0de)
• xtask: preserve pre-push toolchain environment (8d495b9)

Changed

• db: extract host queries (dc6c693)

---

This PR was generated with Release Please. See documentation.

[jmagar]

🤖 Created releases:

• v3.11.2

🌻