release: genmeta v0.8.0-beta.5

[eareimu]

Release contract

• genmeta-identity: 0.4.0-beta.4 → 0.4.0-beta.5
• genmeta: 0.8.0-beta.4 → 0.8.0-beta.5
• planned annotated tag: v0.8.0-beta.5
• all other gmutils workspace member versions remain unchanged

Changes

• reject certserver-invalid email structures before network requests
• preserve the certserver message and display the original numeric or symbolic wire error code
• keep only local key generation and locally generated CSR completion on TTY; keep non-TTY progress silent
• finalize progress before subsequent output and prompts
• derive Scoop checkver from the selected stable or preview channel

Release dependencies and surfaces

• product xtask pins tagged genmeta-xtask-release v0.2.0-beta.9
• all product surfaces are incremental preview updates: crates.io, DEB, RPM, Homebrew, Scoop, and GitHub prerelease assets
• release CI must embed DHTTP_CERT_SERVER_URL=https://api.genmeta.net from required configuration
• no Homebrew preview or Scoop preview metadata PR was open at PR creation time

Verification

• cargo +nightly fmt -- --check
• cargo test
• cargo clippy --all-targets --all-features -- -D warnings
• cargo +1.93 semver-checks --manifest-path genmeta-identity/Cargo.toml --baseline-version 0.4.0-beta.4 --release-type patch: 223 pass, 30 skip
• focused product E2E: 18 passed, 1 marker-deselected
• stable and preview Scoop template rendering validated with canonical decoded regex