Sync develop after v1.3.0 release

[DeusExTaco]

Summary

Syncs the published v1.3.0 release from main back to develop and reopens development at 1.3.1-dev.

The only change after main is the package version. This also brings the curated release notes and explicitly approved, exact-package security exceptions back to develop. The unfinished Step 3 redesign is not included.

Validation

• The v1.3.0 release passed full local and GitHub CI, container security checks, and smoke tests.
• GHCR and Docker Hub publish the same multi-architecture digest for 1.3.0 and latest; both image signatures were independently verified.
• The version-only commit passed all normal pre-commit hooks, including strict type checking and unit tests.
• This PR qualifies for the existing, conservative post-release sync validation path. No checks or branch protections were disabled.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-16T02:30:10.078288Z	2e2dd21	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.