release: v0.4.5

[ajianaz]

Summary

Release v0.4.5 — config architecture redesign, auth improvements, bug fixes, and documentation updates.

Changes Since v0.4.4

Changed

• Config architecture redesign (refactor: centralize config — auth.toml for secrets only, config.yaml for settings #209) — auth.toml for secrets only, config.yaml for settings
• Provider info auto-migration from auth.toml → config.yaml
• Deterministic rules exclude rules/ path (bug: deterministic rules fire on own pattern definitions and test fixtures #185)

Fixed

• cora review sends to wrong provider — now reads from merged config (refactor: centralize config — auth.toml for secrets only, config.yaml for settings #209)
• cora config show displays effective resolved config with source annotations (bug: config show displays file values instead of resolved effective config #189)
• cora auth login auto-detects provider env vars, suggests model/base URL defaults (refactor: simplify auth flow — remove CORA_API_KEY, centralize to auth.toml #203)
• save_provider_info data loss on parse failure
• Env var override visibility (bug: env vars silently override .cora.yaml config without warning #182)
• Truncated JSON repair — 12 new tests (enhancement: repair truncated JSON from LLM responses #186)

Added

• cora config show --global / --project flags (mutually exclusive)
• Interactive model/base URL prompts with enter-to-accept defaults

Docs

• README: updated auth flow, config show flags, CORA_API_KEY description
• docs/configuration.md: new file roles table, API key resolution section
• CHANGELOG.md: full v0.4.5 entry

Files Changed

• Cargo.toml — version bump 0.4.4 → 0.4.5
• CHANGELOG.md — v0.4.5 entry
• README.md — auth flow, config section, env var table
• docs/configuration.md — file roles, resolution order, API key resolution

Test Plan

• All tests pass (333+ unit, 16 CLI, 6 config)
• Pre-commit hook: no issues found
• cora auth status shows correct provider
• cora config show shows effective config
• cora review sends to correct provider