chore: back-merge main → develop after v0.9.3 promote

[saadqbal]

Reconciles main's ancestry (promote + cobra commits) into develop so the next promote doesn't 3-way-conflict. Zero content change — verified tree == origin/main == origin/develop (41ba4607).

⚠️Merge as a merge commit, not squash — squashing re-creates the ancestry drift this fixes (that's what forced the -X ours resolution on #341).

🤖 Generated with Claude Code

---

Note

Low Risk
Empty diff and explicit zero content change; risk is limited to using the wrong merge strategy (squash), not runtime behavior.

Overview
No code or config changes — this PR only aligns develop with main after the v0.9.3 promote so the next promote avoids three-way merge conflicts from divergent history (the situation that led to -X ours on #341).

The trees at the merge tip are intended to match (41ba4607 on both branches). Merge with a merge commit, not squash, so history stays reconciled rather than reintroducing ancestry drift.

^{Reviewed by Cursor Bugbot for commit 2fce66c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[LukasWodka]

👋 Heads-up — Code review queue is at 37 / 30

Above the WIP limit. The team convention is to review existing PRs before opening new work.

Open PRs currently in Code review (oldest first):

• averaging-service#183 — docs: SafeTensors deployment-order & resume-safety runbook (epic feat(auth): logout revokes the token server-side (cli#112) #116) · author: @shujaatTracebloc · reviewer: @saadqbal
• averaging-service#184 — test(weights): shared SafeTensors golden-corpus drift guard + declare safetensors dep (SEC-03) · author: @LukasWodka · no reviewer assigned
• averaging-service#185 — test(weights): average a real SafeTensors edge + a legacy edge in one cycle — SEC-03 §8 · author: @LukasWodka · no reviewer assigned
• backend#1122 — perf(api): cache the anonymous competition-template list (#981 item 4, part 2) · author: @aptracebloc · no reviewer assigned
• backend#1127 — perf(auth): throttle ClientAccessToken last_used_at write (#981) · author: @aptracebloc · no reviewer assigned
• cli#342 — chore(deps): bump actions/setup-python from 5 to 6 · author: @dependabot · no reviewer assigned
• cli#343 — chore(deps): bump actions/download-artifact from 7 to 8 · author: @dependabot · no reviewer assigned
• cli#344 — chore(deps): bump actions/checkout from 4 to 7 · author: @dependabot · no reviewer assigned
• cli#345 — chore(deps): bump actions/setup-go from 5 to 7 · author: @dependabot · no reviewer assigned
• cli#346 — chore(deps): bump azure/setup-helm from 4 to 5 · author: @dependabot · no reviewer assigned

Pull from review before opening new work. (This is a nudge from the kanban WIP check, not a block.)

[saadqbal]

/fr-pass