fix(ui): serve SPA bundle from root, add cache-busting query, expose files API and include default CSS manager styles

changelog.md

@@ -0,0 +1,28 @@
+# Changelog
+
+## 2026-01-10 - 1.0.4 - fix(ui)
+serve SPA bundle from root, add cache-busting query, expose files API and include default CSS manager styles
+
+- Changed HTML script src to use absolute path /bundle.js so the SPA loads correctly when served from various routes.
+- Added cache-busting by appending ?v=${project.version} to /bundle.js in served index.html to avoid stale client bundles.
+- Made the /api/files/:org/:package endpoint available (removed dev-only gating) so package file listing is accessible in non-dev modes, with permission check retained.
+- Added cssManager.defaultStyles to the opencdn-mainpage element to ensure default design system styles are included.
+
+## 2026-01-04 - 1.0.3 - maintenance
+Consolidated maintenance updates.
+
+- Minor maintenance and housekeeping ("update" commits).
+- Duplicate update commits merged; no further detail provided in commit messages.
+- No explicit functional changes described.
+
+## 2022-01-06 - 1.0.1–1.0.3 - core fixes & release tags
+Summary of early releases: core fixes and several non-descriptive release/tag commits.
+
+- fix(core): update — core fixes applied (appears in 1.0.1 and 1.0.2).
+- Non-descriptive release/tag commits for 1.0.2 and 1.0.3 (messages: "1.0.2", "1.0.3")—no details provided.
+- These commits appear to be small fixes and housekeeping around the initial 1.0.x releases.
+
+## 2022-01-05 - unknown - initial
+Initial project commit.
+
+- Project initialized ("Initial commit").