Release 0.1.16 — notification center + polish

[mvalancy]

Release 0.1.16

Two independently-reviewed batches since 0.1.15.

PR	What
#120 (#69)	Aggregating notification bell/inbox for self-heal events — read-gated GET /api/status/notifications, severity filters, persistent dismiss. First slice of the offline notification center.
#122	#121 notify-inbox attribute-XSS hardening (escAttr(), truthful docs — the review caught + fixed a false safety invariant), #95 catalog HTTP-200 empty-feed → incomplete (preserves #57), #96 loop-lock test coverage.

Plus chore(version): VERSION 0.1.15 → 0.1.16.

Gate

• Both: Gate-1 review + green CI (harden(web-ui): notification inbox passes id via inline onclick — safe today only by server id-constraint, not esc(); use data-id + delegation #121 required a second review pass — the gate caught a real attribute-breakout XSS + a false gotchas.md invariant, both fixed + re-verified).
• Release: independent Gate-2 review — integration + security clean; sole finding was the pre-tag VERSION bump (this PR).
• Squash-merge (linear history); tag 0.1.16 (unprefixed).

Deferred (0.1.17+)

#123 escAttr consistency sweep (other server-constrained attribute interpolations), further #69 routing/frequency/LED slices, #67 RAG, #90/#91 slices.

🤖 Generated with Claude Code