chore(release): v0.2.3

Bug-fix release rolling up the security + correctness remediation
from the v0.2.2 code/security review (commit 5d6c2d1):

- Secret-key isolation in make_evaluator_context.
- Sub-128-bit CKKS parameters refused by build_context unless opted
  in via insecure_allow_low_security=True.
- Schema-canonical signature_b64 field; legacy value-only signature
  blocks rejected by validate_envelope.
- min_security_bits defaults to 128.
- True per-thread op_session() isolation under concurrent audits.
- CLI --require-signature enforces cryptographic verification.
- _safe_str strips full ANSI sequences and Unicode bidi / zero-width.
- Encrypted-mask MSE circuit at depth 2; MAE requires approximate=True.
- _safe_div consolidated across base / scoring / regression metrics.
- EncryptedVector.encrypt rejects oversized vectors.

385 tests passing.

Author: BAder82t

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "fairlearn-fhe"
-version = "0.2.2"
+version = "0.2.3"
 description = "Drop-in encrypted (CKKS) Fairlearn metrics. Same API surface; ciphertext arithmetic via TenSEAL."
 readme = "README.md"
 requires-python = ">=3.10,<3.13"

src/fairlearn_fhe/__init__.py

@@ -86,4 +86,4 @@
     "encrypt_sensitive_features",
 ]
 
-__version__ = "0.2.2"
+__version__ = "0.2.3"