chore[notask]: prepare sdk + bare-sdk 0.13.2 release

Release metadata for @qvac/sdk + @qvac/bare-sdk 0.13.2:
- bump sdk + bare-sdk 0.13.1 -> 0.13.2
- bump @qvac/rag ^0.6.2 -> ^0.6.4 (sdk + bare-sdk, mirrored via bare-sdk sync)
- changelog for 0.13.2 (cherry-picked #2581 TTS per-engine language
  validation, #2585 drop bare-runtime/bare-pack from bare-sdk deps, rag bump)
- regenerate NOTICE for sdk + bare-sdk (bare-sdk drops bare-runtime/bare-pack
  attributions; @qvac/rag bumped to 0.6.4)

Also align qv-sdk-bare-sdk-sync's SDK_ONLY_PACKAGES with
check-deps-vs-sdk.mjs (bare-runtime, bare-pack). #2585 added them to the
check script but not the sync script, so the sync was re-adding the
dropped deps to bare-sdk.

Author: opaninakuffo

.cursor/skills/qv-sdk-bare-sdk-sync/scripts/sync.mjs

@@ -51,8 +51,8 @@ const dryRun = args.has("--dry-run");
 const checkMode = args.has("--check");
 
 const DEP_FIELDS = ["dependencies", "optionalDependencies", "peerDependencies"];
-// Keep aligned with check-deps-vs-sdk.mjs's SDK_ONLY_PACKAGES. Empty today.
-const SDK_ONLY_PACKAGES = new Set([]);
+// Keep aligned with check-deps-vs-sdk.mjs's SDK_ONLY_PACKAGES.
+const SDK_ONLY_PACKAGES = new Set(["bare-runtime", "bare-pack"]);
 
 function readPkg(filePath) {
   return JSON.parse(fs.readFileSync(filePath, "utf8"));