chore: release v0.15.1

[ArthurBernard]

[0.15.1] - 2026-08-02

Fixed

• The access log never prints secrets — a redaction filter on the uvicorn
  access/error loggers masks sensitive query values (token, signature,
  api_key, nonce — the transport/http.py key set, public as redact_url)
  at all three serving commands (serve, start --serve, dashboard), so the
  documented ?token= script auth can no longer write the dashboard token to
  journald/log files. (fix: redact secret query values from the uvicorn access log #232)

Test plan

• CI green on develop (run 30755291997, post-fix: redact secret query values from the uvicorn access log #232 merge)
• 1522 tests passed locally, 96.34% coverage; ruff + format + mypy clean