chore(release): release Buzz Relay version 0.2.1

[wpfleger96]

Buzz Relay release v0.2.1

Changes since relay-v0.2.0:

• feat(relay): make per-owner community limit configurable via BUZZ_MAX_COMMUNITIES_PER_OWNER (#2599) (2a051a404)
• feat(relay): add author-only-unless-shared read gate for kind 30175 (#2768) (ab3af8287)
• fix(core): block IPv6 transition SSRF targets (#2801) (c26bf5945)
• fix(workflow): bypass system proxies for webhooks (#2800) (60a171b19)
• fix(audit): hash created_at at the precision Postgres stores (#2638) (264a56a22)
• feat(desktop): make pull request reviews actionable (#2510) (9081ab0ec)
• fix(relay): decompress gzip-encoded git smart-HTTP request bodies (#2670) (5ca36e7b9)
• fix(sharing): preserve agent/team snapshot tEXt chunks through media sanitization (#2438) (b096b0a15)
• fix(relay): send 1012 restart close to all clients on graceful drain (#2575) (1911c69aa)
• fix(media): sanitize animated image uploads (#2524) (8f8f5fa5a)
• fix(channels): strip leading hash prefixes from names (#2250) (d0ab3fdb0)
• feat(relay): make Redis pool size configurable, default 16 (#2521) (bcc3e1306)
• feat(desktop+acp): spawn a harness per (agent, community) pair at GUI startup — warm sockets, lazy LLM pool (#2122) (61cc738ee)
• feat(media): add S3-truth per-community storage sweep (#2044) (bd37a4d58)
• feat(relay): log NIP-98 pubkey attribution on HTTP bridge requests (#2206) (7e34bee62)
• Revert "feat(relay): inventory unreachable Git objects" (#2275) (0fb820f9b)
• feat(relay): inventory unreachable Git objects (#2264) (3afc9dae1)
• relay: add author_type label to buzz_events_stored_total (#2243) (b9f54c43f)
• fix(git): make project branch workflows reliable (#2213) (166f27be4)
• feat(cli): manage repository protection rules (#2193) (f94324598)
• feat(cli): add agents archive/unarchive/archived subcommands (#2173) (7d7992067)
• fix(mobile): sanitize Android image uploads (#2188) (ee21da90b)
• fix(cli): paginate channel directory queries (#2181) (03fe19d60)
• fix(mobile): image upload fails due to unstripped metadata (#2185) (37f15b200)
• perf(relay): compact Git packs before manifest limits (#2172) (80e0ab16b)
• perf(relay): cache Git pack hydration (#2169) (a4d82ec72)
• fix(relay): bound and observe Git read operations (#2167) (5f7c93d9c)
• relay: gate push enqueue on live leases; batch matcher pipeline (T1b/T1a-repair/T2b) (#2145) (e43b2d5aa)
• relay: add audit logging disable switch (#2134) (bf5acabdd)
• relay: skip TTL deadline bump for known-permanent channels (T1a write-amp) (#2125) (2e936d439)
• fix(git): carry NIP-OA delegation in auth event (#2120) (c12257d57)
• Route lag-tolerant reads to an optional Postgres read replica (#2084) (29c48883d)
• fix: recover community access visibility (#2074) (ca384d082)
• feat: proxy feedback-scoped admin attachments (#2059) (d7f918e3c)
• feat: add read-only deployment moderation dashboard (#1999) (68e670e00)
• Bug-bash round 2: table scroll, Goose instructions, workflow mention wake (#2034) (64b8fea6d)
• Strip media metadata on clients and reject it at the relay (#2006) (5cfd69cb0)
• [codex] Hold Git concurrency permits through streaming (BUZZ-SEC-018) (#1916) (7baea42ab)
• [codex] Enforce shared relay admission limits (BUZZ-SEC-019) (#1917) (73fc0ec6c)
• [codex] Block banned actors from moderation commands (BUZZ-SEC-007) (#1915) (caa195ca5)
• [codex] Fix relay WebSocket admission limits (#1682) (d3ce971fc)
• feat: add invite QR and mobile direct join (#1957) (648cbf361)
• fix(join-policy): require legal consent on hosted invites (#1987) (2e1577f76)
• [codex] Prevent actor-tag UI impersonation (#1931) (c540ec967)
• Scope relay runtime state by community (#1658) (d52dedb06)
• Apply optional relay join policy across join flows (#1894) (6c2d66757)
• feat(media): require auth for relay media reads (#1926) (f30876285)
• feat(relay): add community unarchive endpoint (#1908) (6b9641db2)
• feat(relay): gate Git web GUI separately (#1901) (34dc7dec7)
• mesh: upgrade runtime, enforce membership, add shared compute provider (#1656) (54638ff4b)
• Route Git scratch through configured volume (#1884) (2318b3096)
• feat(relay): gate usage metrics behind stable leader (#1814) (59e982150)
• Relay mesh: cross-pod tunnel + huddle transport (buzz-relay-mesh) (#1670) (ccb021d71)
• feat(push): deliver accepted relay events as wakes (#1866) (bffbc5f22)
• fix(db): resolve duplicate migration version (#1863) (08ad38a07)
• Add private product feedback sidecar (#1857) (af190c93e)
• feat(relay): add durable community archival (#1834) (2b15a7267)
• feat(push): add public APNs gateway (#1770) (1c006822e)
• feat(relay): add atomic community ownership transfer (#1845) (52e42ccb9)
• Bound NIP-RS retention and search indexing (#1771) (1b4703021)
• Add optional standalone pairing relay to Helm chart (#1799) (9b47c8548)
• fix(relay): publish membership snapshot on provisioning (#1761) (0950d392b)
• feat(relay): per-community usage metrics (#1723) (620822899)
• refactor(desktop): remove vestigial MCP toolsets config (#1776) (dfec75b3c)

To release: merge this PR. The tag and build will happen automatically.