[robinnsc]

What

Bumps the workspace version 0.1.13 → 0.1.14 across every version-carrying
surface: root Cargo.toml, the thirteen workspace entries in Cargo.lock
(twelve last release plus extenddb-storage-cassandra), all four
license-notices files (postgres, mongodb, cassandra, dev), the npm launcher
manifest (version + five platform pins), and the docs example-output strings.
No source or dependency change.

Why

Opens the 0.1.14 release line for the eighteen commits merged since v0.1.13,
including:

• auth: trust-policy Deny is enforced and IAM condition evaluation matches
  the service (fix(auth): enforce trust-policy Deny and match IAM condition evaluation #420)
• security: rustls, hickory, quinn-proto, h2 and WeasyPrint advisory updates
  (fix(deps): update rustls, hickory, quinn-proto, h2 and WeasyPrint for open advisories #415); Debian security updates in the runtime images (fix(container): apply Debian security updates in the runtime images #413)
• PostgreSQL correctness: TransactGetItems from one snapshot (fix(postgres): read TransactGetItems from one snapshot #382), lock
  missing items in TransactWriteItems (fix(postgres): lock missing items that TransactWriteItems checks or deletes #387), PutItem create-race ordering
  (fix(postgres): order a PutItem that loses a create race after the winner #388)
• SQLite: one process per database file (fix(sqlite): one extenddb process per database file #391); management and credential
  store writes serialized through the engine write lock (fix(sqlite): serialize management store writes through the engine write lock #340)
• streams: shard ids derived from the table id, millisecond stream labels,
  deleted tables' shards swept (fix(streams): derive shard ids from the table id, label streams to the millisecond, sweep deleted tables' shards #383, fix(storage-cassandra): use millisecond stream labels via shared helper #400)
• parallel Scan rejects a cross-segment ExclusiveStartKey (fix: reject cross-segment ExclusiveStartKey in parallel Scan #203); metrics
  drain no longer stalls requests (fix(metrics): stop the metrics drain from stalling requests #386); TCP_NODELAY on accepted sockets
  (fix(server): set TCP_NODELAY on every accepted socket #377)
• Cassandra storage backend in tree (Feat/storage cassandra in tree #338); no Cassandra container image is
  released from this tag (release-image has no Cassandra option)

Testing done

• cargo check --workspace --all-targets --locked — clean.
• All four notices --checks pass with the pinned cargo-about 0.9.0
  (postgres, --backend mongodb, --backend cassandra, and the dev
  generator); the files were regenerated by the scripts, not edited by hand.
• Repo-wide grep: no remaining 0.1.13 references outside historical comments
  in .github/ and docs/adr/.
• Cargo.lock diff: only workspace extenddb* crates move; no third-party
  entries changed.

Checklist

• All tests pass (cargo test --workspace) — not re-run: no source or dependency change
• Code is formatted / clippy — not applicable, no Rust source changed
• I have added or updated tests for new functionality — not applicable
• I have updated documentation if behavior changed — docs version strings updated
• Breaking changes are noted below (if any)

ADR / RFC: n/a — version metadata only.

Breaking changes

None in this PR. The release itself carries the authorization changes from
#420 (trust-policy Deny takes effect, sts:TagSession required for session
tags, previously unresolved condition keys now evaluated, invalid policies
refused at write); docs/manuals/07-upgrade-manual.md has the upgrade notes
and the release notes should link them.

---

By submitting this pull request, I confirm that my contribution is made under
the terms of the Apache License 2.0 and I agree to the Developer Certificate of
Origin (DCO). See CONTRIBUTING.md for details.