fix: solo prev-hash BLOCKER + S1-S4 doc fixes + release-please

[devAsmodeus]

Summary

Post-v0.7.0 follow-up addressing the consolidated final review:

• 1 BLOCKER (B1) — solo.py:_template_to_job produced a prev_stratum_hex
  whose swap_words round-trip cancelled into a no-op, leaving display BE in
  the hashing-time header. Submit-time _assemble_header independently does
  BE→LE, so against a real bitcoind solo mode the miner would have silently
  produced invalid blocks. Masked by FAKE_TEMPLATE.previousblockhash = "0"*64
  (symmetric fixed-point under any byte permutation).
• 4 SHOULD-FIX (S1–S4) — docker-compose port comment, docker run example
  positional, CHANGELOG link footer, README missing --log-file.
• CI — adopted release-please
  for automated releases, mirroring the setup we run in Aegis-Protocol.
• Planning — M-1..M-4 (security MEDIUMs), 6 test-gaps, 6 non-blocking
  code concerns and 11 docs nice-to-haves are tracked in ROADMAP.md
  under «Запланировано на v0.7.x / v0.8.0».

Why one PR (not the original 3-PR stack split)

The original recommended order was B1→PR#7, S1-S4→PR#8. By the time
this work landed, both PR #7 and PR #8 were already squash-merged into
main, so cherry-picking back into the historical branches has no
practical effect. Bundling everything in one fresh branch keeps git blame honest and avoids ghost-branch maintenance.

What's in the four commits

Commit	Scope
3ea1847	fix(solo): prev-hash byte-order BLOCKER B1 — internal LE in header
25c0ae4	docs: address final-review S1-S4 should-fix items
35948f9	ci: add release-please workflow for automated releases
dbc7108	docs(roadmap): defer M-1..M-4, test-gaps, nice-to-haves to v0.7.x/v0.8.0

B1 fix details

- prev_be = bytes.fromhex(tmpl["previousblockhash"])
- prev_stratum_hex = b"".join(prev_be[i:i+4][::-1] for i in range(0, 32, 4)).hex()
+ prev_be = bytes.fromhex(tmpl["previousblockhash"])
+ prev_internal_le = prev_be[::-1]
+ prev_stratum_hex = b"".join(prev_internal_le[i:i+4][::-1] for i in range(0, 32, 4)).hex()

After the fix, swap_words(prev_stratum_hex) == prev_be[::-1] (internal LE),
which is what the block header actually needs.

release-please setup

• .github/workflows/release-please.yml — googleapis/release-please-action@v5
  with release-type: python. Token resolution RELEASE_PLEASE_TOKEN || GITHUB_TOKEN — fine-grained PAT preferred so the release-PR triggers
  downstream CI; falls back to GITHUB_TOKEN with a manual close+reopen
  workaround if the secret is absent.
• release-please-config.json — single-package monorepo at root,
  bump-minor-pre-major: true (so on v0.x feat: → minor and fix: →
  patch), extra-files lists src/hope_hash/__init__.py for the
  __version__ bump.
• .release-please-manifest.json — pins current version at 0.7.0.
• pyproject.toml switched from dynamic = ["version"] to a static
  version = "0.7.0" field; both that field and __version__ carry an
  # x-release-please-version comment marker so release-please updates
  them deterministically.

Action required after merge: create a fine-grained PAT (contents:write +
pull-requests:write on this repo) and store it as repo secret
RELEASE_PLEASE_TOKEN. Without it the first release-PR is created with
GITHUB_TOKEN and won't trigger CI — close+reopen will work as a one-time
workaround.

Test plan

• py -3.11 -m unittest discover -s tests — 244 passing (was 242, +2 sentinels for B1).
• pip install -e . after pyproject change — version 0.7.0 readable from both pip show hope-hash and from hope_hash import __version__.
• New regression sentinels use a real non-symmetric mainnet prev-hash (block #800000, 00000000000000000002a7c4c1e48d76c5a37902165a270156b7a8d72728a054) — no fixed-point masking.
• After merge: confirm release-please opens a release-PR for the next conventional commit (the fix(solo): commit alone should propose v0.7.1).
• After merge: optional manual smoke test of --solo --rpc-url ... --rpc-cookie ... against a regtest bitcoind node.

References

• docs/handoff/final-review.md — consolidated review (4 reviewer agents)
• ROADMAP.md — «Запланировано на v0.7.x / v0.8.0» section
• CHANGELOG.md — [Unreleased] summary

🤖 Generated with Claude Code