chore: release v0.15.0

[github-actions]

🤖 New release

• ironclaw: 0.14.0 -> 0.15.0 (⚠ API breaking changes)

⚠ ironclaw breaking changes

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field SetupSchema.setup_url in /tmp/.tmpDv3LZ8/ironclaw/src/channels/wasm/schema.rs:299
  field PendingApproval.display_parameters in /tmp/.tmpDv3LZ8/ironclaw/src/agent/session.rs:156
  field PendingApproval.display_parameters in /tmp/.tmpDv3LZ8/ironclaw/src/agent/session.rs:156

--- failure enum_struct_variant_field_added: pub enum struct variant field added ---

Description:
An enum's exhaustive struct variant has a new field, which has to be included when constructing or matching on this variant.
        ref: https://doc.rust-lang.org/reference/attributes/type_system.html#the-non_exhaustive-attribute
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/enum_struct_variant_field_added.ron

Failed in:
  field error of variant StatusUpdate::ToolCompleted in /tmp/.tmpDv3LZ8/ironclaw/src/channels/channel.rs:128
  field parameters of variant StatusUpdate::ToolCompleted in /tmp/.tmpDv3LZ8/ironclaw/src/channels/channel.rs:132
  field error of variant SseEvent::ToolCompleted in /tmp/.tmpDv3LZ8/ironclaw/src/channels/web/types.rs:126
  field parameters of variant SseEvent::ToolCompleted in /tmp/.tmpDv3LZ8/ironclaw/src/channels/web/types.rs:128

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/enum_variant_added.ron

Failed in:
  variant PairingStoreError:InvalidPath in /tmp/.tmpDv3LZ8/ironclaw/src/pairing/store.rs:34
  variant RegistryError:MissingChecksum in /tmp/.tmpDv3LZ8/ironclaw/src/registry/catalog.rs:51
  variant RegistryError:MissingChecksum in /tmp/.tmpDv3LZ8/ironclaw/src/registry/catalog.rs:51

--- failure struct_pub_field_missing: pub struct's pub field removed or renamed ---

Description:
A publicly-visible struct has at least one public field that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/struct_pub_field_missing.ron

Failed in:
  field auth_url of struct AuthResult, previously in file /tmp/.tmp2yQ41Y/ironclaw/src/extensions/mod.rs:155
  field callback_type of struct AuthResult, previously in file /tmp/.tmp2yQ41Y/ironclaw/src/extensions/mod.rs:158
  field instructions of struct AuthResult, previously in file /tmp/.tmp2yQ41Y/ironclaw/src/extensions/mod.rs:161
  field setup_url of struct AuthResult, previously in file /tmp/.tmp2yQ41Y/ironclaw/src/extensions/mod.rs:164
  field awaiting_token of struct AuthResult, previously in file /tmp/.tmp2yQ41Y/ironclaw/src/extensions/mod.rs:167

Changelog

0.15.0 - 2026-03-04

Added

• (oauth) route callbacks through web gateway for hosted instances (#555)
• (web) show error details for failed tool calls (#490)
• (extensions) improve auth UX and add load-time validation (#536)
• add local-test skill and Dockerfile.test for web gateway testing (#524)

Fixed

• (security) restrict query-token auth to SSE endpoints only (#528)
• (ci) flush profraw coverage data in E2E teardown (#550)
• (wasm) coerce string parameters to schema-declared types (#498)
• (agent) strip leaked [Called tool ...] text from responses (#497)
• (web) reset job list UI on restart failure (#499)
• (security) replace .unwrap() panics in pairing store with proper error handling (#515)

Other

• Fix UTF-8 unsafe truncation in sandbox log capture (#359)
• enhance coverage with feature matrix, postgres, and E2E (#523)

---

This PR was generated with release-plz.