release: v0.5.4

[looptroop-ai]

Cuts 0.5.4. Merging this publishes to npm, GitHub Releases, Docker Hub, GHCR, Homebrew and Scoop. Chocolatey, WinGet and the AUR stay paused.

Dry run

31795283294 — success, publishing nothing. All four binaries built, the artefact verified on Linux, macOS and Windows, every publish job correctly skipped.

That verification is the one that matters this release: it is the job that fails if checksums.sha256 does not travel between jobs, and it passed on all three platforms. The build log confirms the manifest recorded the file (826 bytes, covering all ten assets) and that it was uploaded with the rest.

What ships

• bun and pnpm install channels, with their own upgrade commands. Both managers could always install LoopTroop; both installations reported themselves as npm ones and were told to upgrade with a command that installs a second copy alongside rather than upgrading theirs.
• checksums.sha256 on every release, generated from release-manifest.json so the two cannot disagree, and verified in both directions before anything publishes.
• README corrections — the container image is no longer described as unpublished, and the three channels that cannot be installed yet say so.

The documentation half is LoopTroop-Website#2, merged immediately after this release goes public.

🤖 Generated with Claude Code