Goat CLI 0.0.2

This release adds infrastructure orchestration for GoatCMS projects, including
pinned execution images, restricted Docker gateway actions, signed deployment
snapshots, retained routing versions, scheduled certificate renewal and recovery
after interrupted operations.

Update the GoatCMS backend and panel, apply migrations 1046–1049, then update
the AI and CI/CD workers before enabling infrastructure stages. Existing proxy
installations require the separate provisioning and bootstrap procedure in
pozoga-core/herd/infrastructure/README.md.

The previous CLI release remains available under dist/0.0.1/. A CLI downgrade
does not reverse database migrations or infrastructure activation; retain the
matching application backup, proxy configuration and machine provisioning.