feat: add resilient updates and access controls

internal/buildinfo/version.go

@@ -0,0 +1,5 @@
+package buildinfo
+
+// Version is replaced through -ldflags for release images. The source fallback
+// keeps local builds and tests honest about the currently checked-out release.
+var Version = "v1.3.0"