v0.2.5

Added

• A dedicated, passphrase-less SSH deploy key for the git addon's own push/pull/fetch (phlat/addons/git/DeployKey.php), independent of any human's SSH credentials, since the running app has no other way to authenticate to a remote unattended. The Changes page offers a "Generate Deploy Key" button and shows the public key once generated, ready to paste into a remote.
• A hand-written "Docs" page on the admin dashboard - a narrative reference (Getting Started, Routing, Fields, Data Objects, Toolkit Reference, etc.) rendered from small JSON topic files.
• The admin dashboard footer shows the current release tag, via a new Toolkit\Git::latestTag().
• F::chmod() Toolkit wrapper.

Fixed

• PageHistory::pending() assumed git's porcelain-status paths were always prefixed with pages/, but git reports paths relative to the true repo top-level - since data sits one level under the app root, this could silently miss or misfile pending changes. Now computes the real prefix from the app's actual root/data paths.
• Container SSH was broken for the deploy key - the base image had no passwd entry for the uid the container runs as, so ssh refused outright; the Dockerfile now creates that user and installs openssh-client.