chore: release 0.9.25

[github-actions]

🚀 Release ${version}

0.9.25 (2026-09-01)

Features

• foreman: diff-coverage gate for added lines no test executes (#1728) (9666346)
• foreman: live turn stream so a coder run can be watched as it happens (#1717) (34b9564)
• modelrouter: AgentGateway data plane beside Proxy and Gateway (#1711) (af497b6)

Bug Fixes

• agent: sign s3:// model fetches on the metal path (#1709) (3f30570)
• agent: skip comment-only hunks in the per-hunk mutation pass (#1742) (82c0ffd)
• controller: bound inference container memory with a limit, and validate the quantity at admission (#1726) (e4a3669)
• controller: make zero-findings scope-overlap demotion inert (#1737) (8a44529)
• foreman: bound the dependency wait when TimeoutSeconds is unset (#1736) (db98633)
• foreman: clear Dispatched condition on terminal Workloads (#1741) (9786684)
• foreman: pass upstreamURL to the coder post-push envtest gate (#1732) (8d47306)
• foreman: preserve the workspace when the agent loop ends unsuccessfully (#1716) (d17a7dd)
• foreman: report rejected submissions on max-turns INCOMPLETE (#1714) (e4f88e9)
• foreman: report the packages the diff-coverage gate could not measure (#1734) (15ba740)
• foreman: validate resolvedBy before ALREADY-RESOLVED skips verification (#1730) (2b35d71)

---

This PR was generated with Release Please. See documentation.