chore(release): prepare for 2026.3.3

[Benoît Cortier (CBenoit)]

Hotfix release with #2039 (DGW-464), #2068 (DGW-453) and #2069 (DGW-460).
#2074 is included but has no changelog entry: it fixes a crash in the gateway.db import from #2039, which ships in this same release.

The second commit fixes the changelog-to-jira release skill, so rebase-merge to keep it out of the release commit.

Issue: DGW-453, DGW-460, DGW-464

🤖 Generated with Claude Code

[Benoît Cortier (CBenoit)]

Implementation notes:

• Version bumped with tools/bump-version.ps1 (VERSION, Cargo.toml/Cargo.lock, fuzz/Cargo.lock, .csproj, .psd1, AppxManifest.xml); cargo metadata --locked passes.
• Linux packaging changelogs say "No changes." because no commit since 2026.3.2 touches package/.
• The CHANGELOG.md entries were rewritten from the PR descriptions to only mention what ships: no tokengen or .NET KdcClaims, no libsql/SQLite versions, no design notes.
• The docs-writter skill commit (agents: update docs-writter skill #2067) has no entry: it only touches agent skills, and git-cliff skipped it because of the typo check.
• DGW-464 was created for feat(dgw): keep agent tunnel data in a shared gateway.db #2039 and moved to Done; feat(dgw): honor an explicit agent on KDC tokens #2068 and fix(dgw,agent): fix Windows service crash at startup #2069 already had DGW-453 and DGW-460.

chore(ai-skills) commit:

• JiraPS 2.16 New-JiraIssue has no -Assignee; the assignee now goes through -Fields @{ assignee = @{ accountId = ... } }.
• DGW transition IDs changed (961 no longer exists from Backlog). Transitions are now picked by target status, furthest along Backlog → To Do → Development → Reviewing → Done first, and the error lists the available transitions when none moves forward. Tested against mocked workflows (linear with new IDs, direct jump to Done, unknown status, already Done) and on DGW-464.
• The README asked for a scoped API token; Jira rejects those on the site URL with Client must be authenticated to access this resource., so it now asks for a plain token.

[Copilot]

🟢 Approval recommended

The version metadata is consistent, the changelog matches the included changes, and the JiraPS usage aligns with its supported API.

0 open findings

What changed in this PR

Prepares the 2026.3.3 hotfix release and improves the changelog-to-Jira workflow.

Changes:

• Bumps product and package versions to 2026.3.3.
• Adds release and packaging changelog entries.
• Makes Jira assignment and workflow transitions more robust.

File	Description
VERSION	Updates the release version.
Cargo.toml	Updates the Rust workspace version.
Cargo.lock	Refreshes workspace package versions.
fuzz/​Cargo.lock	Refreshes the fuzz package version.
DevolutionsGateway.psd1	Updates the PowerShell module version.
DesktopAgent.csproj	Updates the Desktop Agent version.
AppxManifest.xml	Updates the shell extension version.
CHANGELOG.md	Documents the hotfix release.
package/​Linux/​CHANGELOG.md	Adds the Gateway package release.
package/​AgentLinux/​CHANGELOG.md	Adds the Agent package release.
changelog-to-jira/​SKILL.md	Documents transition-failure handling.
changelog-to-jira/​README.md	Corrects API-token guidance.
invoke-jira.ps1	Resolves assignees and transitions dynamically.

No material findings identified.

🧠 Review effort: Balanced

---

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.