chore(main): release 0.2.0

[github-actions]

🤖 I have created a release beep boop

0.2.0 (2026-06-15)

⚠ BREAKING CHANGES

• api: The X-Org-ID header is no longer accepted. Org context is now resolved exclusively from the request Host header (subdomain or custom domain). AEGIS_BASE_DOMAIN defaults to lvh.me for local dev.

Features

• agent: add parallel scan pipeline with chunking, dedup, and tiered models (a1930b4)
• api,ui: add scan lifecycle endpoints and scans page (764a94f)
• api: add MFA brute-force protection with Valkey-backed session allowlist (45248e8)
• api: enforce require_mfa org feature flag in TenantResolver (6cca496)

Bug Fixes

• api: add error logging to agent ingest and fix upsert table qualifier (b7f1342)
• ci: remove LOCALHARNESS_PAT — localharness is a public repo (cb3db7d)
• ui: remove non-functional UI elements and fix broken links (d0c77d5)
• ui: wait for project context before fetching findings data (2d85110)

Documentation

• update all references from X-Org-Slug to X-Org-ID (a5fde0b)

Miscellaneous

• api: remove X-Org-ID header, resolve orgs from subdomain only (b2e2b34)

---

This PR was generated with Release Please. See documentation.