chore: release main

[github-actions]

🤖 I have created a release beep boop

web: 1.12.0

1.12.0 (2026-07-21)

Features

• add Head TA (HTA) role (#344) (b6a7deb)
• enforce a $0 Actions budget cap as org policy (#356) (3cb60e4)
• web: add RTL language support (Arabic, Hebrew, Farsi, Urdu) (#340) (5e36401)
• web: capability-gate RBAC so TAs/Head TAs can't invoke owner-only or write ops (#346) (4335378)
• web: centralize classroom resource reconcile on owner open (#349) (c795216)
• web: show live submission presence in teacher gradebook (#354) (a7a8465)

Bug Fixes

• web: guide teachers past missing and Free-plan orgs in setup modal (#355) (4018f4b)
• web: let CLDR fixed-count plural forms drop the count placeholder in verify_locale (#345) (99d8c76)
• web: patch brace-expansion DoS (GHSA-3jxr-9vmj-r5cp) (#357) (ab4c306)
• web: refresh staff list after add and guard teacher self-removal (#350) (e3a7b9a)

cli: 1.12.0

1.12.0 (2026-07-21)

Features

• add Head TA (HTA) role (#344) (b6a7deb)
• ci: add release-please automation for cli releases (#341) (b5a3b94), closes #143
• enforce a $0 Actions budget cap as org policy (#356) (3cb60e4)
• web: capability-gate RBAC so TAs/Head TAs can't invoke owner-only or write ops (#346) (4335378)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• web-v1.12.0

🌻

[rongxin-liu]

🤖 Created releases:

• cli-v1.12.0

🌻