release: 2.3.0-rc1

[raspbeguy]

First release candidate for 2.3.0. Bumps VERSION to 2.3.0-rc1, retitles the CHANGELOG section, and regenerates build/openapi.json (info.version follows VERSION).

This RC publishes to GitHub Releases as a pre-release only. The stable 2.3.0 tag and the apk-feed publication are held until apply-confirm reaches a stable feed release, per the standing sequencing rule for the commit-confirmed-apply integration.

What ships in 2.3.0:

• Commit-confirmed apply: a config write can arm a rollback deadline via ?confirm=<seconds>; uapi snapshots the affected uci packages, commits, returns 202 with a confirm token, and apply-confirm auto-reverts unless the client acks before the deadline. Optional, feature-detected dependency (501 confirm_unavailable when apply-confirm is absent). New /confirm endpoints and the uapi:confirm scope.
• Per-token rate / burst overrides plumbed through the token mint surfaces (HTTP + CLI).
• uapi-token scopes CLI subcommand and module export of the known scope tree.
• Platform-fidelity fixes from the stock-config round-trip audit (validation no longer stricter than the platform for several uci fields).

Gates green locally: lint, 778 unit tests, openapi-check, coverage.

🤖 Generated with Claude Code