v0.2.0 — cueapi fire + executions subgroup

Adds:
- cueapi fire <id> for ad-hoc one-shot triggers, optional --payload-override + --merge-strategy
- cueapi executions subgroup (list / list-claimable / get / claim / claim-next / heartbeat / report-outcome)
  closes the worker-transport receive→claim→process→complete loop

Parity with @cueapi/mcp@0.3.0 + @trydock/agent-bridge.
Also fixes version drift: __init__.py was 0.1.3, pyproject.toml was 0.1.5; both now 0.2.0.

PR: #24

security: add PEP 740 attestations to PyPI publish workflow (#19)

- Pin pypa/gh-action-pypi-publish to SHA (v1.14.0)
- Enable attestations: true for PEP 740 provenance
- Add test job before publish (tests must pass before release)
- Add explicit permissions: { contents: read } at workflow level
- Bump version to 0.1.4
- Document attestation in README

Co-authored-by: Gk <gk@Gks-MacBook-Pro.local>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

feat: add update, --worker, --payload, --on-failure, key regen fix

release: v0.1.3

fix: use release/v1 branch ref for pypi-publish (Docker image needs b…

…ranch ref) (#10)

Co-authored-by: Gk <gk@Gks-MacBook-Pro.local>