chore: release v0.2.0 [skip ci]

CHANGELOG.md

@@ -6,11 +6,24 @@ All notable changes to GuruConnect are documented here. Format follows
 Per-version entries below are generated from conventional commits (`feat:`, `fix:`, `perf:`)
 by the release workflow; per-component changelogs are also written to
 `changelogs/<component>/v<version>.md` and served at `/api/changelog/...`.
+## [0.2.0] - 2026-05-29
+
+### Added
+
+- Operational tooling — signing, versioning, changelog, roadmap (SPEC-001) (60519be2)
+
+### Fix
+
+- Use Self:: for static method calls (cc35d111)
+
+### Security
+
+- Require authentication for all WebSocket and API endpoints (4614df04)
 
 ## [0.1.0] - 2026-01-18
 
 ### Added
 - Initial GuruConnect: Rust agent (DXGI/GDI capture, input injection, native viewer,
-  `guruconnect://` handler), Axum relay server, protobuf-over-WSS transport.
+`guruconnect://` handler), Axum relay server, protobuf-over-WSS transport.
 - Phase-1 security hardening (JWT, Argon2id, rate limiting, security headers, SEC-1..5),
-  systemd units, automated backups.
+systemd units, automated backups.