Release v0.12.3 · microsoft/apm

What's Changed

fix(install): branch-ref drift no longer ships 3-way-inconsistent lockfile by @danielmeppiel in #1158
fix(install): rewrite in-package relative links to apm_modules/ paths (#1147) by @danielmeppiel in #1160
fix(policy): close audit --ci silent governance bypass + SCP/ADO URL parsing (#1159) by @danielmeppiel in #1164
fix(targets): explicit, auditable target resolution (closes #1154) by @danielmeppiel in #1165
fix: exclude .apm-pin from skill deploy copytree by @tillig in #1153
fix(copilot): translate env-var placeholders instead of baking secrets to disk (#1152) by @danielmeppiel in #1169
chore(release): v0.12.3 by @danielmeppiel in #1170
test(integration): pass --target copilot to apm init --yes by @danielmeppiel in #1171
fix(install): orphan cleanup runs when apm.yml is emptied + diff-aware test fixes by @danielmeppiel in #1173
fix(install): restore static-target deploy path; tighten test fixtures for #1154 strict harness detection by @danielmeppiel in #1176
test: fix v0.12.3 CI failures on Windows + macOS by @danielmeppiel in #1179
test(release-validation): pass --target copilot to apm init on Windows by @danielmeppiel in #1180

Full Changelog: v0.12.2...v0.12.3