merge: incorporate origin/main into community-mode branch

Conflicts resolved:
- VERSION: keep 0.14.0.0 (our branch > main's 0.13.3.0)
- package.json: same version resolution
- CHANGELOG.md: keep both entries, 0.14.0.0 above 0.13.3.0
- .gitignore: merge both sides (our bun.lock + main's env patterns)

Main brought in v0.13.3.0 "Lock It Down": pinned dependencies via
bun.lock, gstack-slug non-git fallback, setup CI timeout, Windows
lockfile fix, design doc discovery fix, autoplan sequential voices,
community PR guardrails in CLAUDE.md.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitignore

@@ -18,4 +18,3 @@ bun.lock
 .env.local
 .env.*
 !.env.example
-supabase/.temp/