release: Video Autopilot Kit v0.23.0

[Hao0321]

Summary

• release Video Autopilot Kit v0.23.0 with the architecture cleanup and public-release closure
• retire the CapCut runtime and route editing workflows through Editkin contracts
• add Imagegen-first materials, deterministic public sync, semantic privacy gates, and cross-platform release receipts
• harden transactional install, update, same-version repair, explicit-workspace migration, and rollback boundaries
• publish SHA-pinned CI and release workflows with exact-main and reproducible-asset gates

Verification

• full system health: GREEN
• release-manager transaction self-test: GREEN
• architecture gate: 0 failures, 0 cycles, 0 layer violations, 0 forbidden imports, 0 parse failures
• public sync receipt: 264 hashes, GREEN across LF/CRLF normalization
• semantic privacy gate: 13 rules, GREEN
• reproducible exact-commit builds: byte-identical ZIP, channel, and SHA sidecar
• local lifecycle: published v0.21.1 -> exact v0.23.0 -> CURRENT -> rollback to v0.21.1
• protected owner canaries: unchanged across update and rollback
• independent nested-workspace and updater review: GREEN

Release contract

The tag must point at the exact remote main commit. The tagged workflow must publish exactly four assets:

1. install_or_upgrade.py
2. release-channel.json
3. video-autopilot-kit-v0.23.0.zip
4. video-autopilot-kit-v0.23.0.zip.sha256

Remote assets will be downloaded and re-tested for fresh install, update, current-state detection, rollback, receipt integrity, privacy, and quick health before the release is declared complete.