docs(changelog): add the bounded library reads release

[indykish]

Draft — roughly half of this entry documents unshipped surface. It describes the whole M143 library story, but only part of that story has merged. Marking ready-for-review is gated on agentsfleet feat/m143-library-read-surfaces landing.

Recovered from a working-tree stash in the docs repo and rebased onto main, which had moved on to the M141 lease fan-out release. Jul 27 sits above Jul 26, newest first; the M141 entry is byte-identical.

Per-claim audit against agentsfleet main

Every bullet was checked against the merged tree, not against the PR description that produced it.

Claim in the entry	Shipped?	Evidence
UZ-LIBRARY-001 … -008	✅	all eight in errors/error_entries.zig on main
limit 1–100, default 50	✅	pagination.DEFAULT_LIMIT = 50, MAX_LIMIT = 100
GET /v1/models and …/fleet-libraries are paged	✅	both routes registered on main
GET …/fleet-libraries/{tier}/{id} detail route	❌	gallery_detail.zig exists only on the unmerged branch
"gallery summary no longer carries support_files"	❌	main's gallery.zig still emits it (3 sites)
Catalogue filters ?q= / ?provider=	❌	catalog.zig is absent from main entirely
ETag / Cache-Control / Vary / 304	❌	same — lives in catalog.zig
Bundle ceilings, 200-byte names	❌	main has MAX_CREDENTIAL_NAME_LEN = 128; = 200 is on the branch
CLI install --library follows next_cursor	❌	no library pagination in cli/ on main
Dashboard Models page lists every entry	❌	no library next_cursor in ui/packages on main

What actually shipped is agentsfleet#558 — "feat(api): bound and secure library data reads" — which carries the error codes, the limits, and the two paged routes. The remainder is on feat/m143-library-read-surfaces, which has no open PR yet and was being actively worked while this was written.

The docs.json nav entry is deliberately withheld

The stash also added a nav line for GET /v1/workspaces/{workspace_id}/fleet-libraries/{tier}/{id}. That is not in this branch, because the repository's own gate refuses it:

❌ openapi drift: paths referenced by docs but missing from
   .../agentsfleet/main/public/openapi.json:
  - GET /v1/workspaces/{workspace_id}/fleet-libraries/{tier}/{id}

The gate is right — the path is absent from main's published openapi.json. It was not overridden or worked around. The nav line lands with the route.

Before marking ready

1. Merge feat/m143-library-read-surfaces in agentsfleet.
2. Re-add the docs.json nav line; the drift gate should then pass on its own.
3. Re-check the ❌ rows above — several are precise numbers (200 bytes, 32/64/64 counts) that must match what actually merges, not what the branch held when this was written.

Note on an unfilled obligation

#558 merged without a changelog entry, so the shipped half is currently undocumented on the live site. This PR does not fix that — it defers all of it to the full entry. If you would rather close that gap now, the alternative is to split: land a trimmed entry covering only #558's verified surface, and let the read-surfaces branch bring its own. Say the word and I will split it.

🤖 Generated with Claude Code