chore: prepare v0.8.11 release

[danielmeppiel]

Summary

Bump version to 0.8.11 and consolidate CHANGELOG entries for all PRs merged since v0.8.10.

Included in this release

Security:

• Reject symlinked primitive files to prevent traversal attacks (fix: enforce symlink containment in file discovery and resolution #596)

Added:

• Artifactory archive entry download for virtual file packages (feat: Artifactory archive entry download for virtual file packages #525)

Changed:

• Unified scope resolution, dispatch table, and hook merge deduplication (refactor: unify integration dispatch, result types, and hook dedup #562)

Fixed (14 fixes):

• Hook deployment scope-awareness: apm install -g deploys to correct target dir ([BUG] Global hook deployment writes to ~/.github/hooks/ instead of ~/.copilot/hooks/ #565, fix: use scope-resolved target dir for hook deployment #566)
• Windows non-UTF-8 console encoding crashes (fix: subprocess encoding failures on Windows non-UTF-8 consoles (CP950/CP936) #591)
• PowerShell 5.1 Join-Path compatibility (fix: use nested Join-Path for PowerShell 5.1 compatibility #593)
• Marketplace GITHUB_HOST for GHE users (fix: respect GITHUB_HOST in marketplace add command #589)
• compilation.exclude primitive discovery leakage (Fix: compilation.exclude does not filter primitive discovery #477)
• Script runner false-positive runtime detection ([fix] script_runner: anchor runtime detection patterns to prevent false positives #563)
• Missing applyTo warning across all compile modes (fix: warn when instruction is missing required fields during apm compile #449)
• Remote default branch detection ([fix] detect remote default branch instead of hardcoding main (#573) #574)
• Duplicate skill name warnings ([fix] warn when two packages deploy a native skill with the same name #545)
• auto_create=False directory creation guard (Scope-awareness gaps: hook integrator, auto_create, integration tests #576)
• apm deps update -g scope passthrough (refactor: unify integration dispatch, result types, and hook dedup #562)

Files changed

• CHANGELOG.md -- consolidated entries under [0.8.11]
• pyproject.toml -- version bump 0.8.10 -> 0.8.11

[Copilot]

Pull request overview

Prepares the v0.8.11 release by bumping the package version and promoting changelog entries into a new released section.

Changes:

• Bump apm-cli version from 0.8.10 to 0.8.11.
• Promote changelog content into a new ## [0.8.11] - 2026-04-06 section.

Show a summary per file

File	Description
pyproject.toml	Updates the package version to 0.8.11.
CHANGELOG.md	Adds a 0.8.11 release section and lists included PRs/changes.

Copilot's findings

Comments suppressed due to low confidence (2)

CHANGELOG.md:19

• The 0.8.11 section has multiple bullets for the same PR #562 (three separate ### Changed bullets and another ### Fixed bullet). The changelog convention here is one bullet per PR; consider consolidating #562 into a single line in the most appropriate subsection and removing the duplicates.

### Changed

- Scope resolution now happens once via `TargetProfile.for_scope()` and `resolve_targets()` -- integrators no longer need scope-aware parameters (#562)
- Unified integration dispatch table in `dispatch.py` -- both install and uninstall import from one source of truth (#562)
- Hook merge logic deduplicated: three copy-pasted JSON-merge methods replaced with `_integrate_merged_hooks()` + config dict (#562)

CHANGELOG.md:26

• #565 is referenced in two separate ### Fixed bullets. If both changes shipped together, consider combining them into a single bullet (e.g., (#565, #566)) so each PR appears once in the release notes.

- `apm install -g` now deploys hooks to the scope-resolved target directory instead of hardcoding `.github/hooks/` (#565, #566)
- Hook sync/cleanup derives prefixes dynamically from `KNOWN_TARGETS` instead of hardcoded paths (#565)
- `auto_create=False` targets no longer get directories unconditionally created during install (#576)

• Files reviewed: 2/2 changed files
• Comments generated: 3

[Copilot]

Changelog release sections should keep a top-level ## [Unreleased] header (even if empty) and then add the new ## [0.8.11] - 2026-04-06 section beneath it. Right now [Unreleased] was removed entirely, which breaks the project changelog structure and makes it harder to stage upcoming entries.

Suggested change

	## [Unreleased]

[Copilot]

#525 is listed under 0.8.11 (Added) but it is also already present in the 0.8.10 section below. For a release changelog, each PR should appear in exactly one released version; either move the #525 entry exclusively into 0.8.11 or keep it only under 0.8.10 (depending on which version actually shipped it).

This issue also appears on line 24 of the same file.

Suggested change

- Artifactory archive entry download for virtual file packages (#525)

[Copilot]

This release includes a security fix (#596) but it is currently filed under ### Fixed. To match the changelog's type groupings, add a ### Security section for 0.8.11 and move the symlink traversal entry there.