chore(release): prepare v0.14.18

[vriesd]

Prepare v0.14.18 for the recording-coordination changes merged in #138. Update the workspace version and six workspace lockfile entries, and add release notes covering phase publication, lease-aware status recovery, control ordering, and native verification.

Validated locked Cargo metadata, changelog extraction/self-test, and the diff. The release tag will be created only after the merged main test and packaging workflows pass. Physical-desktop and elapsed routine-use sign-off remain documented limitations of the implementation evidence.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-05T16:28:48.907286Z	f50e757	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[vriesd]

PASS after pending CI completes green - independent release-only verdict for PR 139.

Verified current branch release/v0.14.18 at head f50e757e96f528ddf42516377ce05d09bbd92a5b against base 3e5ed9a919a63896661157336db3d5a0ffcb279f.

Evidence checked:

• Diff touches only Cargo.toml, Cargo.lock, and CHANGELOG.md.
• Stable patch-id: 788217c484eb229afc632be38febe619eca2eac7.
• cargo metadata --locked --no-deps --format-version 1 succeeds.
• All 6 workspace packages resolve to 0.14.18: echo, echo-core, echo-desktop, echo-ipc, echo-ipc-gen, and xtask.
• Cargo.lock updates the same six workspace package versions from 0.14.17 to 0.14.18; no dependency graph change is present in the release diff.
• Changelog notes accurately describe the PR 138 recording coordination changes: Injecting publication before insertion, live lease validation for active status, explicit recording control/frontend observation policies, and added CLI/native verification coverage.
• Changelog scope does not claim physical desktop QA or elapsed soak.

Current PR checks observed while posting: assets, policy, and release-policy passing; frontend and rust still pending; release packaging/publish jobs skipped as expected for the PR workflow. This release PR is ship-ready once those pending checks complete successfully.

Known limit: physical desktop dictation and elapsed soak were not performed for this release PR. The user has explicitly authorized merge/tag after green CI with that known limit.