Release v0.5.2

[SylonZero]

Summary

Version bump for v0.5.2, tagging the Asset archive/soft-delete work and the query-layer attribution exposure (PRs #70-#71, both already merged). Per the established release ritual: this is the version-bump commit, tagged before merge (v0.5.2 already pushed pointing at this branch's tip) — merging via a real merge commit (not squash/rebase) keeps the tag reachable from master.

Please merge with "Create a merge commit," not squash or rebase, so the v0.5.2 tag stays valid.

What's in this release

• Asset delete replaced with a reversible archive/soft-delete tombstone (archivedAt/archivedById/archivedByKind) — hidden from lists/pickers/Atlas but nothing referencing it (work items, tasks, dependency edges, plan/release links) is touched
• New MCP tools archive_asset/restore_asset, disclosing reference counts in the response
• New shared authorization rule canDeleteAsset (org owner/admin, creator, or declared asset owner), enforced identically in the UI and MCP
• createdById/updatedById now exposed through the query layer for plans, tasks, work items, and releases — closes a gap from v0.5.1 where attribution was backfilled but never surfaced to readers
• Product page's asset editor: archive confirmation dialog with accurate, non-destructive copy, plus a collapsible "archived assets" section with a Restore action

Test plan

• pnpm exec tsc --noEmit — no new errors (two pre-existing, unrelated errors remain: passwordHash, CodePlan.productName)
• pnpm test — 287/287 passing
• pnpm build — succeeds
• Version-only + one README changelog line — no code changes in this PR

🤖 Generated with Claude Code

https://claude.ai/code/session_016ZM1Fxzj2sqge7EyGQ8LXb