ForgeFlow 0.10.1

Reliable certificate-free updates

Windows installer and portable releases are supported without paid signing services.
Packaged updates remain protected by exact Gitea release assets, PE validation and SHA-256 verification before staging and immediately before replacement.
Old ForgeFlow versions are pruned from dist after each successful build.

Repository matching is case-insensitive, so Jens/Repo and jens/repo refresh the same deployment profile.
Running repository workloads are linked conservatively; third-party DockerMan applications remain visible as external monitoring-only workloads instead of generating hundreds of false repository problems.
Historical and stopped duplicate definitions no longer require repetitive manual review.
Shadowed automatic profiles are retired only after a recovery snapshot and a stable reviewed reconciliation plan.
Live runtime, container health and commit evidence are refreshed before readiness is reported.

Existing running repository workloads can receive repository-scoped read-only deploy keys without changing containers.
The audit command supports compact inventory, reconciliation and access evidence for operational verification.
Release acceptance no longer assumes an external Authenticode certificate while retaining checksum, provenance and SBOM checks.