chore: bump fw-4.9.0 / cli-3.10.0 — Audit v1 release

[montfort]

Summary

Audit v1 release. Closes the integrated v1 audit-skills iteration described in `Propuesta/devtrail-audit-cli-flow.md` v0.2. Tags the previously-merged PRs (#103-#109) into a coherent shipped release that responds to issue #102 with one integrated upgrade rather than four separate patches.

Bumps

• `cli/Cargo.toml`: 3.9.0 → 3.10.0 (minor — new `--prepare` / `--merge-reports` flags, canonical path migration, deprecation shims for `--calibrate` / `--finalize`, R10 + R11(A) fixes).
• `dist/dist-manifest.yml`: 4.8.0 → 4.9.0 (minor — new `devtrail-audit-execute` skill, unified prompt template replacing 3 v0 templates, AGENT-RULES §12 wording aligned to 3-skill sequence).

What's in the release (summary across PRs #103-#109)

• R10 fix (fix(cli): R10 — resolver respects HTML comment bounds (issue #102) #103): resolver respects HTML comment bounds — no more 30k-token duplication.
• R11(A) fix (fix(cli): R11(A) — default git_range prefers origin/main..HEAD over HEAD~1..HEAD #104): `git_range` default → `origin/main..HEAD` with intelligent fallback.
• Unified prompt template + schema evolution (feat(framework): v1 unified audit prompt template + schema evolution (R11(B)) #105): seven universal sections lifted from Sentinel.
• CLI subcommand refactor + canonical paths (feat(cli): v1 audit subcommand refactor — unified flow with canonical paths #106): `audit/charters/` → `.devtrail/audits/`, `--prepare` / `--merge-reports`, deprecation shims, v0 templates deleted.
• New `devtrail-audit-execute` skill (feat(framework): Phase v1 PR 5 — devtrail-audit-execute skill (3 platforms) #107): zero-copy/paste auditor-side execution with auto-discovery and slug detection.
• `audit-prompt` and `audit-review` skills updated (feat(framework): Phase v1 PR 6 — audit-prompt and audit-review skills updated #108): review evolves to consolidated 6-section `review.md` analysis.
• Adopter docs aligned to v1 (docs: Phase v1 PR 7 — adopter docs aligned with v1 audit-skills (3 langs) #109): CLI-REFERENCE, WORKFLOWS, ADOPTION-GUIDE, QUICK-REFERENCE, AGENT-RULES §12 — all 3 langs.

Test plan

• `cargo test` → all suites green (276 unit + 17 charter_audit + 12 audit_skill + 9 audit_template + 4 checkpoint_guidance + all others)
• `cargo check` → version bumps propagate cleanly
• CHANGELOG combined section with Credit to Sentinel for the contributed source material

After merge

Tags `fw-4.9.0` and `cli-3.10.0` will be pushed, triggering the release workflows. Adopters get the new release via `devtrail update-framework` / `devtrail update-cli`. Sentinel can re-run CHARTER-07 audit cycle under the new flow once the binaries are published.

Phase v1 progress

PR	Status
1 R10 resolver fix	merged (#103)
2 `git_range` default	merged (#104)
3 Unified prompt template	merged (#105)
4 CLI subcommand refactor	merged (#106)
5 `devtrail-audit-execute` skill	merged (#107)
6 `audit-prompt` and `audit-review` skills updated	merged (#108)
7 Adopter docs (3 langs)	merged (#109)
8 Bump release	this PR

🤖 Generated with Claude Code