Release 0.3.0

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

CHANGELOG.md

@@ -6,6 +6,13 @@ publish a tag that has no section here.
 
 ## [Unreleased]
 
+## [0.3.0] - 2026-10-30
+
+Third release: working with a site's existing network services (DNS provider, fixed leases on
+Kea and OpenWrt, NetBox device sync, Infoblox), Redfish across vendors with firmware updates,
+UEFI Secure Boot, agents over HTTPS, and a security review of the whole code base. Upgrading:
+rerun `deploy/install.sh` on the region and `deploy/install-rack.sh` on rack hosts.
+
 ### Added
 - Proxy DHCP: a VLAN in `proxy` mode (`rollcall vlan add ... -proxy-dhcp`, web UI, `bootstrap.sh
   --proxy-dhcp`) leaves addresses to the site's DHCP server and only answers PXE; machines keep DHCP