v0.10.0 feat: governed WeChat article workflows

[wutongci]

Summary

• Add tenant-scoped content capabilities with video_script enabled by default and wechat_article controlled by platform administrators.
• Add governed ArticleBrief, ArticleItem, and WeChat delivery contracts plus local CLI/MCP workflows and a four-skill WeChat article pack.
• Extend submission, approval, and review flows to validate article evidence, approved baselines, claims, rights, and exact revision digests.
• Add the public /docs center with shared JSON and Markdown endpoints while keeping internal architecture pages private.
• Add the additive 00003_tenant_content_capabilities.sql migration and align CLI, Web, Plugin, MCP, bootstrap, and environment versions at 0.10.0.

Test Coverage

• go test -race ./...
• Web: 13 files, 61 tests passed
• pnpm --dir web typecheck
• pnpm --dir web build
• pnpm governance:v3
• pnpm governance:content
• Plugin signing: 4 tests passed
• Plugin evaluation: 12 deterministic scenarios passed
• npm pack --dry-run --json

Pre-Landing Review

No blocking SQL safety, concurrency, trust-boundary, enum-completeness, or frontend rendering issues found. The migration is additive, capability writes use an atomic parameterized upsert, and article content renders as structured React nodes without raw HTML injection.

Design Review

The admin capability control uses the existing compact table and native checkbox patterns. The public review and documentation views reuse the current design tokens and responsive breakpoints; no new gradients, oversized cards, hidden focus outlines, or unsafe HTML were introduced.

Eval Results

All 12 deterministic Plugin scenarios passed, including the new WeChat article governance scenario. The first WeChat release intentionally stops at a validated local operator package and does not claim external login, asset upload, preview, or publication side effects.

Plan Completion

The release scope is complete: tenant capability governance, article contracts, local production workflow, server approval gates, public review rendering, documentation, migration, signed Plugin metadata, and release version alignment are present.

Test plan

• Go race suite passes
• Web tests, typecheck, and production build pass
• V3 and multi-content governance checks pass
• Plugin evaluation and Ed25519 signature validation pass
• npm package dry run contains only the expected launcher and package metadata