chore(main): release 0.3.3

[github-actions]

🤖 I have created a release beep boop

0.3.3 (2026-09-28)

Features

• Allow embedding the app, docs and website in iframes (#360) (55ed000)
• app: Show a record's bill of materials, and fix its type label (#358) (76e490f)
• app: Show owners which product fields are still missing (#347) (6617cc1)
• auth: Let users delete their own account (#336) (78249d3)
• auth: Require MFA for every superuser power (#342) (6bed221)
• backend: Rate-limit signed-in requests per user (#334) (98cd309)
• deploy: Pull published GHCR images instead of building on the host (#362) (e029ca6)
• env: Increase upload size limits for users and lab users (#348) (73dac4d)
• Export products as CSV or JSON (#349) (72f7c9e)
• images: Tier per-image caps by role, upload photos at full resolution, and make superusers lab (#335) (89cef3f)
• Product type link and superuser moderation (#340) (0297d69)
• Refuse stale product edits and show the last editor (#363) (b645d1e)
• Serve www and docs from Cloudflare Workers (#364) (2d906e6)

Bug Fixes

• auth: Harden self-service account deletion (#339) (b59a285)
• backend: Draw unique usernames and emails in the user factory (#305) (43ce559)
• Count stored image size in the upload quota, clean up camera previews on admin delete (#353) (7d7d6c0)
• deploy: Report a migration that failed without stranding the stack (#276) (e77cc09)
• deploy: Surface a migration that gates the stack (#274) (71e457d)
• deps: Patch transitive advisories and keep overrides from piling up (#294) (1771643)
• deps: Pin lodash-es to 4.18.1 under chevrotain (#356) (7453637)
• deps: Update all non-major (#331) (5b34108)
• deps: Update docs (#315) (6ccfa4b)
• deps: Update docs (#319) (c5b47d1)
• deps: Update repo-tooling (#277) (c8501a9)
• docker: Refresh python, uv, and postgres base image digests (#283) (285f109)
• docs: Lint the whole docs subrepo (#365) (088bce7)
• files: Sanitize values in the missing-storage delete warning (#359) (cecdd96)
• images: Strip metadata on every storage backend and in png/webp/xmp (#346) (e25f2d3)
• Make main green: scroll the section chip row, update the delete-dialog spec (#357) (4baebc3)
• renovate: Stop holding lock file maintenance on release age (#299) (587e289)

Performance Improvements

• backend: Add a deploy-shaped capacity probe (#333) (9ac5c04)
• backend: Cover the rpi_cam relay in the k6 baseline (#321) (ac6a00c)

---

This PR was generated with Release Please. See documentation.