chore: release Forge v0.33.0 (AXI-183)

[Codename-11]

Release

Prepare Forge v0.33.0 from current main.

Included

• AXI-180 / PR AXI-180: Add full local and hybrid identity management #96 — complete local, hybrid, and external identity management
• AXI-181 / PR feat: add restricted project access and integration grants (AXI-181) #97 — restricted project access and explicit integration grants
• AXI-182 / PR feat: harden OIDC and managed runtime delivery (AXI-182) #98 — standards-correct OIDC, worker-plane runtime diagnostics, Hermes adapter/helper hardening, and runtime UX

Changes

• bump package.json to 0.33.0
• add curated v0.33.0 release notes to CHANGELOG.md
• record serialized release preparation in DEVLOG.md

Verification

• implementation PRs passed exact-head GitHub CI before merge
• combined post-merge local quality gate: 1,646 passed, 1 intentional skip
• changelog/build/helper distribution tests: 8/8 passed
• Hermes helper archives and checksums generated successfully

Exact-head CI on this release PR must pass before squash merge. After merge, tag the exact resulting main SHA as v0.33.0 and create the GitHub release with the prevalidated helper assets.

Implements AXI-183. Production deployment is explicitly out of scope.