chore: release

[ironclaw-ci]

🤖 New release

• ironclaw: 0.27.0 -> 0.28.0
• ironclaw_common: 0.4.0 -> 0.4.1 (✓ API compatible changes)

Note: the root ironclaw bump on this PR was added as a follow-up
commit (9e69f22d2) on top of release-plz's auto-generated leaf bump
(2b9a56e29). cargo-semver-checks did not detect API-breaking changes
in ironclaw_common 0.4.0 -> 0.4.1, so release-plz did not cascade
a bump into the root ironclaw package by default. The follow-up
commit adds the missing [package] version bump in Cargo.toml and
a CHANGELOG entry for ironclaw 0.28.0, so merging this PR will
create both ironclaw_common-v0.4.1 and ironclaw-v0.28.0 tags
and trigger cargo-dist on the root tag.

⚠️ Merge promptly. release-plz regenerates this PR every time
main moves and will close it (replacing it with a fresh PR that
drops the manual root bump) on any new push to main. If you see
the PR get closed by ironclaw-ci[bot] before it merges, the same
manual edits will need to be re-applied to the new chore PR.

Changelog — ironclaw 0.28.0

Added

• (reborn) land the reborn-integration substrate on main, introducing host foundation crates, capability host, runtime dispatcher, process lifecycle, filesystem, secrets, network, and extension manifest registry boundaries
• (reborn) add WIT-compatible WASM tool runtime (#3097)
• (reborn) add host runtime contract facade and services graph (#3095, #3126)
• (reborn) add memory document storage boundary and search/plugin seams (#3078, #3079)
• (reborn) add prompt write safety policy (#3167)
• (reborn) route WASM and MCP HTTP through shared egress (#3123, #3142)
• (reborn) add host-controlled trust-class policy engine (#3043)
• (channels) add WeChat channel (#1666)
• (channels) add multi-tenant relay channel with per-user identity resolution (#3253)
• (llm) enable thinking for Ollama via default additional params (#2372)

Fixed

• (llm) route DeepSeek, Gemini, and OpenRouter through dedicated rig-core clients (#3326)
• (config) keep startup LLM fallback in-memory only (#3324)
• (engine) inline gate await for Tier 0 and Tier 1 Approval gates (#3157)
• (engine,web) suppress restart-recovery noise on Projects tab; retry empty hydration on SSE open (#3328)
• (bridge) coerce engine action params per schema (#3197)
• (bridge) mission_* tools accept name; resolves [Bug Bash 4/17] Routine creation fails with "5 consecutive code errors" #2583 (#3155)
• (libsql) parse scientific notation cost aggregates (#3297)
• (reborn) harden capability approval lifecycle (#3111)
• (reborn) harden edge-case contracts and runtime network policy handoff (#3165)

Changed

• (common) clarify crate-level doc wording and align package description (#3370, #3372)

CI / Release

• cut over workflows for main merge queue (#3104)
• build ironclaw docker image with staging tag from main branch (#3301)
• (release) bump cargo-dist to 0.31.0 to fix installer (#3172)
• add deterministic nightly deep checks and full browser suite nightly (#3261, #3262)
• add nightly failure issue alerts (#3293)

Docs

• refresh feature parity against OpenClaw 2026.3.11–2026.4.30 (#3310)
• promote database and configuration pages from drafts to live; fix wrong defaults; expand variable reference

Tests

• (reborn) add phase 1 integration coverage, host runtime vertical gates, and CapabilityHost integration coverage
• (e2e) add dedicated reborn e2e gate and stabilize coverage suite

Changelog — ironclaw_common 0.4.1

Added

• (common) align crate description with lib.rs doc wording (#3372)

Fixed

• (common) clarify crate-level doc wording (#3370)

---

This PR was originally generated by release-plz with the leaf bump only; the root ironclaw bump was appended manually because cargo-semver-checks didn't cascade.