chore(main): release truffle 0.7.14

[github-actions]

🤖 I have created a release beep boop

0.7.14 (2026-09-16)

Features

• apple: the login gate — the tailnet login as the mesh boundary (3c561cf)
• apple: the tailnet login on every public identity surface (668e4f8)
• cli: the peer list and status show the tailnet login (37bb71b)
• core,napi,tauri: the gate gets a door and the login gets a public surface (9b3ffaf)
• core: Layer 3 filters by login, and a gated node refuses a sidecar that cannot report one (d45984a)
• core: RFC 025 — the login becomes a peer fact, and a node can declare which logins may join (e729922)
• core: RFC 025 — the login gate at the hello, and a store slice bound to its sender (feb685d)
• sidecar: the login rides every peer row and the node's own status — protocol 5 (eec5799)

Bug Fixes

• apple: a login the gate refuses is a departure, not an update (8e41d2e)
• apple: a peer we cannot attribute reports no login, and is not dialed (27ac01f)
• apple: preserve peer identity and recover Tailscale watches (9d77cf9)
• core: a gated node will not dial a peer whose owner it cannot state (M2) (5894d62)
• core: a hello-only peer's store slices bind to their sender again (M1) (e8b65a8)
• core: a peer whose login turns foreign is EVICTED, not silently kept (404f4b1)
• core: one login_allow builder method after the Layer 3 merge (b81a662)
• deps: rustls 0.23.45 — RUSTSEC-2026-0285 (TLS 1.3 handshake messages across encryption levels) (ff1bbd6)

---

This PR was generated with Release Please. See documentation.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[github-actions]

🤖 Created releases:

• truffle-v0.7.14

🌻