Release Notes v0.3.37

Changes

• Added an operational hardening checklist to the runbook (listener policy, sealing discipline, backups, rotation, and post-upgrade checks).