chore(release): prepare v0.0.5

[StringKe]

What changed

• bump the repository release version from 0.0.4 to 0.0.5
• generate the 0.0.5 CHANGELOG entry with git-cliff
• include the one-time-link recovery and privacy-safe diagnostics fix merged in PR fix(auth): harden one-time link recovery #73

Release scope

This is a patch release for the production one-time-link recovery fix. No package publication, container artifact, or custom binary asset is produced by the release workflow.

Validation

• pnpm changelog --tag v0.0.5

• pnpm check

• release contract tests: 60 PASS

• root and Worker coverage gates: 279 PASS each

• pnpm run security:secret-scan

• git diff --check

• No secrets, .env files, real tokens, private keys, or real tenant data in the diff

• Commit includes DCO sign-off