chore(release): prepare v3.0.6

Prepare the patch release for temporary unsigned Git uploads, abandoned PR
ref cleanup and crash recovery. Move the accumulated changes into a dated
release section with a one-sentence summary of the overall behavior.

Align the Cargo manifest, lockfile and NixOS module at 3.0.6; flake packages
read the manifest version. Keep grasp-audit at 0.2.0. This commit changes
release metadata only; tag creation and publication are separate steps.

Validation: locked offline Cargo metadata reports the intended workspace
versions; regular and static Nix packages evaluate to 3.0.6; NixOS module
parsing and diff checks pass. The parent passed 148 focused tests, including
the PRS expiry regression, and formatting checks. Its live soak is separate.

Assisted-by: GPT-6

CHANGELOG.md

@@ -7,6 +7,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.0.6] - 2026-09-30
+
+Keep unsigned Git uploads temporary, reclaim abandoned PR data, and preserve
+pending uploads correctly across crashes.
+
 ### Fixed
 
 - Keep Git uploads that no signed event names out of permanent storage. A push

Cargo.lock

@@ -1356,7 +1356,7 @@ checksum = "81c353b400a5503efdcf398f11a83fb7aa84f59f5d76fc4bf5bbc1e4f5366caa"
 
 [[package]]
 name = "ngit-grasp"
-version = "3.0.5"
+version = "3.0.6"
 dependencies = [
  "anyhow",
  "async-trait",

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "ngit-grasp"
-version = "3.0.5"
+version = "3.0.6"
 edition = "2021"
 authors = ["ngit-grasp contributors"]
 license = "MIT"

nix/module.nix

@@ -6,7 +6,7 @@ let
   # Build ngit-grasp package (shared across all instances)
   ngit-grasp = pkgs.rustPlatform.buildRustPackage {
     pname = "ngit-grasp";
-    version = "3.0.5";
+    version = "3.0.6";
     src = ../.;
     NGIT_BUILD_REVISION = ngitGraspSourceRevision;
     cargoLock = {