Release ready: v0.65.0

[github-actions]

Auto-release sensor wants to cut v0.65.0 (minor bump).

Why: fix present (patch fast lane)

Because this release includes feat: changes, the sensor did
not auto-tag. Run the destructive e2e suite locally, then
cut the release manually:

• L4 CI (vm-e2e-spike.yml) is green on the latest commit on main
• sanity-check the curl|bash smoke and cli-compat results in the most recent test.yml run on main
• git tag -a v0.65.0 -m "..." and git push origin v0.65.0
• close this issue

L4 CI is not yet a hard merge gate, but feat: changes carry
more risk than fix: patches — verify it before tagging.

[fullstackjam]

Released as v0.65.0 — includes #147 (v0.63 review follow-ups) and #149 (wizard deep-polish).