chore(main): release 0.18.0

[github-actions]

🤖 I have created a release beep boop

0.18.0 (2026-10-06)

Features

• add a deletion policy that can orphan rendered resources (7b9d3d7), closes #287
• add pull request branch, author, and label fields (6096d16), closes #286
• apply namespaces before the objects that use them (0d85bca), closes #282
• apply rendered resources with server-side apply (256f2eb), closes #284
• expose cluster secret, CAPI, and connectivity fields (a911f0d), closes #279
• filter generated elements with CEL (8a105f1), closes #289
• record per-object apply time and the last error (163cd02), closes #283
• refuse link-local and cluster addresses in the API client (0c9dcfd), closes #288
• report resource health separately from Ready (dc5178b), closes #280
• skip rendering when source digests are unchanged (44e8943), closes #290

Bug Fixes

• include the reconcile error in Kubernetes events (beaddcc), closes #281
• read OCI artifact digests from the watched API version (a1b5f5a)
• watch pull request and API client secrets (8064d0b), closes #285

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• v0.18.0

🌻