chore(release): prepare v3.0.2

Promote the already-reviewed release automation, documentation export metadata, canonical project references, and deterministic packaging fixtures as a stable maintenance release without changing production runtime behavior.

Move the accumulated Unreleased entries into a dated v3.0.2 section and align the Cargo and Nix package versions. The implementation remains isolated in the preceding merge commits.

Correctness relies on the Cargo manifest, lockfile, and Nix module declaring the same version. The OCI release behavior was validated by the green pull-request workflow, and the documentation exporter remains independently reviewable in its merge.

This commit deliberately excludes runtime changes, a grasp-audit version bump, the release tag, and publication. Validation is limited to release-metadata consistency and diff checks; the full suite is left to CI.

CHANGELOG.md

@@ -7,12 +7,34 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.0.2] - 2026-09-11
+
+This release contains no production runtime changes. It improves release and
+deployment plumbing, source-owned documentation exports, canonical project
+references, and build-time test portability.
+
+### Added
+
+- Export a deterministic, side-effect-free command and configuration schema for
+  pinned downstream documentation generation.
+
 ### Changed
 
+- Publish tagged static archives as signed NIP-82 releases, using the `main`
+  channel for stable versions and a channel derived from the prerelease label
+  for release candidates.
 - Publish release container images as Nostr kind-30624 repositories backed by
   redundant Blossom storage. Stable images receive version and `latest` tags;
   prereleases receive version and channel tags. Maintainers can backfill an
   exact prior-release tag through CI without moving a stable channel backwards.
+- Point GRASP implementation references and maintainer guidance at their
+  canonical Nostr Git sources.
+
+### Fixed
+
+- Make shallow-migration and bare-repository test fixtures deterministic across
+  Git default-branch configurations, while keeping routine `git init` output
+  out of test logs.
 
 ## [3.0.1] - 2026-08-29
 
@@ -592,7 +614,8 @@ defensive limits explicit and operator-configurable.
 
 Initial release of ngit-grasp, a GRASP relay implementation in Rust.
 
-[unreleased]: https://gitworkshop.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit-grasp/compare/v3.0.1...HEAD
+[unreleased]: https://gitworkshop.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit-grasp/compare/v3.0.2...HEAD
+[3.0.2]: https://gitworkshop.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit-grasp/compare/v3.0.1...v3.0.2
 [3.0.1]: https://gitworkshop.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit-grasp/compare/v3.0.0...v3.0.1
 [3.0.0]: https://gitworkshop.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit-grasp/compare/v2.1.2...v3.0.0
 [2.1.2]: https://gitworkshop.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit-grasp/compare/v2.1.1...v2.1.2

Cargo.lock

@@ -1319,7 +1319,7 @@ checksum = "f0efe882e02d206d8d279c20eb40e03baf7cb5136a1476dc084a324fbc3ec42d"
 
 [[package]]
 name = "ngit-grasp"
-version = "3.0.1"
+version = "3.0.2"
 dependencies = [
  "anyhow",
  "async-trait",

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "ngit-grasp"
-version = "3.0.1"
+version = "3.0.2"
 edition = "2021"
 authors = ["ngit-grasp contributors"]
 license = "MIT"

nix/module.nix

@@ -6,7 +6,7 @@ let
   # Build ngit-grasp package (shared across all instances)
   ngit-grasp = pkgs.rustPlatform.buildRustPackage {
     pname = "ngit-grasp";
-    version = "3.0.1";
+    version = "3.0.2";
     src = ../.;
     NGIT_BUILD_REVISION = ngitGraspSourceRevision;
     cargoLock = {