chore(main): release 0.19.0

[artificer-forge-bellows]

🤖 I have created a release beep boop

0.19.0 (2026-09-12)

Features

• cli: add --json to launch which, pr list, tmux ls, workflow list, workflow status, and workflow verify (2a4b281)
• cli: bare forgectl opens a hub reaching every command group instead of only the tmux jumper; an unknown top-level verb or subverb (e.g. a typo) now always fails with Cobra's own unknown-command error rather than silently opening a menu (137f8f1)
• cli: docs list gains --timeout (deadline, default 15s) and --limit (bound row count, default unlimited) (91a907c)
• env: env set --sops writes one key into a SOPS file, value never in argv (b42f1a5)
• env: env set --sops writes one key into a SOPS file, value never in argv (8cf2084)
• pr: admission cap on every launch path, --queue defers to the drainer (#472 Task 3) (#516) (1c47683)
• pr: durable launch phases, slot reservation, and pr repair (#299 Task 2) (#502) (ca71948)
• pr: lifecycle lock, atomic breadcrumb writer, and v2 record fields (#299) (#497) (2b4c3a0)
• pr: pr repair --prune reaps set-aside records and compacts the audit log (#511) (e0c3340)
• pr: queue and drain verbs (#473 Task 4) (#518) (f12019e)
• sops: pure domain package — path grammar, value rules, and the line editor (bbcd762)

Bug Fixes

• cli: errors keep paths as written; env check documents exit codes; config names init (#486) (bf03b23)
• env: the confirmed --any-file path is the path that gets written (e4c2009)
• env: the confirmed --any-file path is the path that gets written (7bdf6b6)
• env: the lock open validates its own descriptor, and refusals close theirs (d40cf53)
• pr: dash flags needs-repair rows with their reason and stops calling queued records an internal error (#509) (dcd29a2)
• pr: teardown and cleanup write the same intent-then-complete audit rows repair does (#510) (cf7e768)
• sops: the block refusal names the rule, not the key the operator supplied (281ff61)
• sops: the rules check walks the whole path and the verifier resolves it (59538fc)
• tasks: mcp --http requires --pin-ip; pinned dialer copies its list; --ping keeps the body read error (#488) (94d2d65)
• test: tree-walking tests skip dot-directories; ignore nested worktrees (#484) (f0a3255)

---

This PR was generated with Release Please. See documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 0b7f1760-224e-459e-bfcb-d319836157dd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}