jalth 0.3.0 release notes

The version-drift warning now matches what you can actually do. Admins see Run jalth upgrade --worker-only to sync.; operators and members see Ask an admin to run jalth upgrade --worker-only to sync.. Re-run jalth init or jalth join once after upgrading so the CLI knows your role — until then the warning will use the delegated phrasing. (#50)
Add opt-in jalth ssh enable --strict that locks root sshd to cert-only by writing Match User root + AuthorizedKeysFile none into the drop-in. Closes the gap where cloud-init or provider-shared keys continued to grant root SSH outside Access on cloud VMs where jalth registers root as the login account. No-op when the registered user is not root. The fixed version group ensures @jalth/registry and @jalth/api bump to the same minor at release. (#41)

Fix jalth ssh enable --allow-team silently adding the wrong email_domain rule when the mesh’s Worker custom domain differs from the org’s email domain. The Worker now persists meshConfig.emailDomain at init.configure time and reads it on the allow-team path. (#39)
Updated dependencies [f8405f3, b6c7cfe]:
- @jalth/api@0.3.0