chore: prepare genmeta v0.8.0-beta.6

[eareimu]

Summary

• prepare genmeta v0.8.0-beta.6 and genmeta-identity v0.4.0-beta.6
• put the paid-checkout deadline and action before the indented QR code and leave the copyable payment link last
• retain the checkmarked local key/CSR and committed installation/renewal milestones in interactive and non-interactive identity flows
• mount new welcome services at /welcome; after default selection, print the platform-specific pishoo reload command followed by the copyable genmeta curl command in one compact, consistently indented block
• keep all other gmutils member versions unchanged from v0.8.0-beta.5

Release plan

• incremental preview release
• crates.io: genmeta-identity v0.4.0-beta.6, then genmeta v0.8.0-beta.6
• preview DEB/RPM/Homebrew/Scoop plus GitHub prerelease assets
• gmutils publishes before pishoo to avoid shared preview metadata races

Verification

• cargo +nightly fmt -- --check
• cargo +nightly clippy --workspace --all-targets --all-features --locked -- -D warnings
• cargo +nightly test --workspace --all-targets --all-features --locked
• cargo +nightly-2026-06-10 semver-checks --manifest-path genmeta-identity/Cargo.toml --baseline-version 0.4.0-beta.5 --release-type patch (223 passed, 30 skipped)
• cargo +nightly publish --dry-run --locked --allow-dirty -p genmeta-identity -p genmeta
• uv run ruff check and uv run ruff format --check in genmeta-test

Full uv run tests --release in genmeta-test was explicitly skipped for this release by release-owner approval on 2026-07-18. Product merge is gated by the repository-local verification above and this PR's required release CI.

Annotated tag message

genmeta v0.8.0-beta.6

Changed

• Reorder paid identity checkout guidance so the payment deadline and action appear before the indented QR code, with the copyable payment link shown last.
• Retain checkmarked local secp384r1 key generation, CSR request, and committed installation or renewal milestones in both interactive and non-interactive identity flows.
• Mount newly generated welcome services at /welcome. Immediately after default-identity selection, print a compact, consistently indented block containing the platform-specific pishoo reload command (sudo brew service reload pishoo on macOS or sudo systemctl reload pishoo elsewhere), followed by the copyable genmeta curl command for the new identity.

Components

• genmeta v0.8.0-beta.6
• genmeta-identity v0.4.0-beta.6
• Other gmutils workspace member versions are unchanged from v0.8.0-beta.5.

Release surfaces

• crates.io: genmeta-identity v0.4.0-beta.6 and genmeta v0.8.0-beta.6
• Preview DEB, RPM, Homebrew, and Scoop packages
• GitHub prerelease and packaged release assets