Merge pull request #11 from plexara/fix-oidc-inbound-chain

Fix #10: accept OIDC JWTs on /v1/* via inbound chain

Merge pull request #9 from plexara/fix-audit-body-and-tryit-auth

audit,portal: render bodies as utf-8 strings; propagate identity through Try-It and replay

Merge pull request #6 from plexara/makefile-spa-gate

guard against stale SPA embed dir at verify and build time

Merge pull request #4 from plexara/add-release-workflow

Release pipeline: tag-triggered goreleaser to GitHub Releases + GHCR