chore: release v0.5.107 — ship pipeline auto-commit

[githubrobbi]

Summary

just ship Phase 2 auto-commit for v0.5.107 — the [workspace.package].version bump in Cargo.toml. This PR routes that commit through branch-protection rules. Once it merges to main, auto-tag-release.yml tags the commit and invokes release.yml, which builds the cross-platform binaries and publishes GitHub Release v0.5.107.

Auto-merge

--auto --squash is queued — GitHub will merge as soon as the required status checks pass. Squash is required because main-protection mandates signed commits, and GitHub's rebase-auto-merge cannot sign the rebased commit; the squash-merge commit is signed by GitHub's own key, which satisfies required_signatures: true. The original author's signed commit remains verifiable in the PR branch history.

After merge

The auto-commit lived only on release/v0.5.107, so local main never drifted — sync it with a plain git pull --ff-only origin main (no reset --hard needed).