chore: release v0.16.0

[github-actions]

🤖 New release

• ironclaw: 0.15.0 -> 0.16.0 (⚠ API breaking changes)

⚠ ironclaw breaking changes

--- failure auto_trait_impl_removed: auto trait no longer implemented ---

Description:
A public type has stopped implementing one or more auto traits. This can break downstream code that depends on the traits being implemented.
        ref: https://doc.rust-lang.org/reference/special-types-and-traits.html#auto-traits
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/auto_trait_impl_removed.ron

Failed in:
  type JobContext is no longer UnwindSafe, in /tmp/.tmpQTatSL/ironclaw/src/context/state.rs:99
  type JobContext is no longer RefUnwindSafe, in /tmp/.tmpQTatSL/ironclaw/src/context/state.rs:99
  type JobContext is no longer UnwindSafe, in /tmp/.tmpQTatSL/ironclaw/src/context/state.rs:99
  type JobContext is no longer RefUnwindSafe, in /tmp/.tmpQTatSL/ironclaw/src/context/state.rs:99

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field AppComponents.recording_handle in /tmp/.tmpQTatSL/ironclaw/src/app.rs:51
  field JobContext.http_interceptor in /tmp/.tmpQTatSL/ironclaw/src/context/state.rs:158
  field JobContext.tool_output_stash in /tmp/.tmpQTatSL/ironclaw/src/context/state.rs:166
  field JobContext.http_interceptor in /tmp/.tmpQTatSL/ironclaw/src/context/state.rs:158
  field JobContext.tool_output_stash in /tmp/.tmpQTatSL/ironclaw/src/context/state.rs:166
  field SmartRoutingConfig.domain_keywords in /tmp/.tmpQTatSL/ironclaw/src/llm/smart_routing.rs:651
  field SmartRoutingConfig.domain_keywords in /tmp/.tmpQTatSL/ironclaw/src/llm/smart_routing.rs:651
  field WebhookSchema.hmac_secret_name in /tmp/.tmpQTatSL/ironclaw/src/channels/wasm/schema.rs:296
  field AgentDeps.http_interceptor in /tmp/.tmpQTatSL/ironclaw/src/agent/agent_loop.rs:79

--- failure struct_missing: pub struct removed or renamed ---

Description:
A publicly-visible struct cannot be imported by its prior path. A `pub use` may have been removed, or the struct itself may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/struct_missing.ron

Failed in:
  struct ironclaw::tools::builtin::WebFetchTool, previously in file /tmp/.tmpRbTajV/ironclaw/src/tools/builtin/web_fetch.rs:58

--- failure struct_pub_field_missing: pub struct's pub field removed or renamed ---

Description:
A publicly-visible struct has at least one public field that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/struct_pub_field_missing.ron

Failed in:
  field simple_max_chars of struct SmartRoutingConfig, previously in file /tmp/.tmpRbTajV/ironclaw/src/llm/smart_routing.rs:39
  field complex_min_chars of struct SmartRoutingConfig, previously in file /tmp/.tmpRbTajV/ironclaw/src/llm/smart_routing.rs:41
  field simple_max_chars of struct SmartRoutingConfig, previously in file /tmp/.tmpRbTajV/ironclaw/src/llm/smart_routing.rs:39
  field complex_min_chars of struct SmartRoutingConfig, previously in file /tmp/.tmpRbTajV/ironclaw/src/llm/smart_routing.rs:41

Changelog

0.16.0 - 2026-03-06

Added

• Add HMAC-SHA256 webhook signature validation for Slack (#588)
• restart (#531)
• merge http/web_fetch tools, add tool output stash for large responses (#578)
• integrate 13-dimension complexity scorer into smart routing (#529)

Fixed

• (ci) anchor coverage/ gitignore rule to repo root (#591)
• (security) use OsRng for all security-critical key and token generation (#519)
• prevent concurrent memory hygiene passes and Windows file lock errors (#535)
• sort tool_definitions() for deterministic LLM tool ordering (#582)
• (ci) persist all cargo-llvm-cov env vars for E2E coverage (#559)

Other

• update WASM artifact SHA256 checksums [skip ci] (#560)
• add WIT compatibility tests for WASM extensions (#586)
• Trajectory benchmarks and e2e trace test rig (#553)

---

This PR was generated with release-plz.