chore(main): release 0.3.0

[github-actions]

🤖 I have created a release beep boop

0.3.0 (2026-02-27)

Features

• ACL policy records for packet filter enforcement (#62) (a9e4571), closes #31
• add daemon control socket for meshd up/down/status (6398d06), closes #30
• add didjwk.Create() for node identity generation (80a6253)
• add didjwk.Create() for node identity generation (a64150a), closes #44
• daemon control socket for meshd up/down/status (cdcc50e)
• implement peer add CLI command (ba1080c)
• implement peer add CLI command (a12b3e0), closes #28
• protocol redesign with member layer, dual node paths, and recipient-based auth (#82) (#84) (640bccc)
• protocol-level filtering in ACL rules (#64) (#91) (8b05ac6)
• real TUN device support for kernel-level mesh networking (21838e6)
• real TUN device support for kernel-level mesh networking (f8d3853), closes #25
• smart meshd up with guided setup and one-command workflows (d439a4e)
• smart meshd up with guided setup and one-command workflows (cc710d9), closes #29
• wire DWN subscriptions to engine for real-time peer updates (9106bb9)
• wire DWN subscriptions to engine for real-time peer updates (3296d53), closes #29

Bug Fixes

• audit bug fixes (#67-#75) (#79) (317ae05)
• detect offline peers using endpoint record timestamps (b8328a0)
• detect offline peers using endpoint record timestamps (72649ce), closes #32
• persist context key locally and remove dead node re-encryption (#90) (acd8fc7)
• use Protocol Context encryption for all records so peers can decrypt (#87, #88) (#89) (45e5245)
• zero sensitive crypto key material after use (#78) (#81) (20f5bd0)

---

This PR was generated with Release Please. See documentation.