docs: finalize CHANGELOG for v0.1.0 release

Move accumulated Unreleased notes into the [0.1.0] section with the
release date (2026-04-18) and reset [Unreleased] to empty. The v0.1.0
section captures the full surface of the initial public release:
core runtime, 96 AWS services scaffolded, 671/699 boto3 compatibility,
web dashboard, Docker packaging, open-source scaffolding, and the
MECE-organized documentation suite.

Author: skyoo2003

CHANGELOG.md

@@ -6,17 +6,70 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+_Nothing yet._
+
+## [0.1.0] - 2026-04-18
+
+First public release of DevCloud — a local development companion for cloud-native apps. Positioned as an on-ramp to the cloud, not a replacement: iterate locally without cloud bills, then land cleanly on your target CSP.
+
 ### Added
-- `LICENSE` file at repository root (MIT)
-- `CONTRIBUTING.md`, `CODE_OF_CONDUCT.md`, `SECURITY.md` community health files
-- `CHANGELOG.md` for release tracking
-- `.github/FUNDING.yml` placeholder
-- GitHub Actions: `lint.yml` (golangci-lint), `stale.yml`, `release-drafter.yml`, `codeql.yml`, `labeler.yml`
-- `.github/release-drafter.yml` and `.github/labeler.yml` configuration
 
-## [0.1.0] - TBD
+**Core runtime**
+- Single-binary HTTP gateway on port **4747** with multi-protocol support (REST-XML, JSON 1.0, JSON 1.1, REST-JSON, Query) and middleware chain (error recovery, body limit, CORS, request ID, structured logging).
+- Plugin registry with deterministic service initialization order and graceful shutdown.
+- Zero-config startup: server runs with embedded default configuration if `devcloud.yaml` is absent.
+- Config loader with `Load()` (strict) and `LoadOrDefault()` (graceful fallback to embedded).
+- Environment-variable overrides: `DEVCLOUD_SERVICES` (with `tier1` / `tier2` / `tier3` / `all` shortcuts) and `DEVCLOUD_DATA_DIR`.
+
+**AWS service coverage**
+- 96 AWS services scaffolded from official Smithy models via an in-tree code generator.
+- Big 6 fully implemented: **S3, SQS, DynamoDB, Lambda, IAM, STS**.
+- Integration services: SNS, CloudWatch, CloudWatch Logs, KMS, SecretsManager, SSM, EventBridge, ECR, EC2, ECS, Route53, ACM, CloudFormation, and more.
+- Cross-service integrations: CloudFormation provisioning, DynamoDB Streams → Lambda, SQS → Lambda, S3 → Lambda, EventBridge → SQS/SNS/Lambda, SNS → SQS subscriptions.
+- **96% boto3 compatibility** (671/699 tests passing against the official AWS SDK test surface).
+- Port-aware URL construction in SQS, ECR, and CloudFormation response paths (opts-based, not hardcoded).
+
+**Code generation pipeline**
+- Smithy JSON model parser and template-driven Go generator.
+- Weekly auto-sync workflow keeps models current with AWS upstream.
+- Generated files (`internal/generated/**`) include SPDX license headers and are marked `DO NOT EDIT`.
+
+**Web dashboard** (optional, gated on `dashboard.enabled`)
+- Next.js 15 / React 19 / Tailwind UI served statically by the Go server.
+- Service status, resource browser, WebSocket-based live API log stream.
+
+**Docker packaging**
+- Multi-stage production Dockerfile (Alpine runtime).
+- Dockerfile.dev for hot-reload frontend development.
+- `docker-compose.yml` wiring backend (port 4747) and Next.js dev server (port 3000).
+
+**Open-source scaffolding**
+- Apache License 2.0 with `NOTICE` attribution file.
+- Community health files: `CODE_OF_CONDUCT.md` (Contributor Covenant v2.1), `CONTRIBUTING.md`, `GOVERNANCE.md`, `SECURITY.md`, `SUPPORT.md`, `TRADEMARKS.md`.
+- GitHub Actions workflows: CI (Go tests, multi-arch amd64 + arm64), CD (Docker build + push to ghcr.io), boto3 compatibility tests, weekly Smithy model sync, golangci-lint, CodeQL, stale bot, release-drafter, PR labeler.
+- Issue templates (bug, feature, question), PR template with SPDX and CHANGELOG gates, CODEOWNERS, Dependabot (weekly gomod / npm / github-actions), FUNDING.
+- SPDX-License-Identifier headers on all Go sources, enforced by `scripts/add-spdx-header.sh` via pre-commit hook; codegen templates emit the header automatically.
+
+**Documentation**
+- `README.md` with on-ramp positioning and Quick Start.
+- `docs/` suite: getting-started, configuration, architecture (with multi-CSP vision), roadmap, services-matrix, contributing, FAQ, troubleshooting, per-service references.
+- MECE-organized documentation so each topic has a single canonical location.
+
+**Testing**
+- Go unit tests for every service package (108 packages, all green).
+- Table-driven port-propagation regression tests in SQS, ECR, CloudFormation.
+- Python/boto3 compatibility suite under `tests/compatibility/`.
+
+### Known Issues
+
+- `auth.enabled: true` is accepted but SigV4 enforcement is not yet implemented; the server emits a warning at startup to make this visible.
+- Lambda function invocation is a stub (accepts registration but does not execute handler code).
+- Windows is not in the CI matrix; WSL2 is expected to work.
+
+### Not in Scope for v0.1.0
 
-Initial public release. See [README.md](README.md) for feature summary.
+- Multi-CSP support (Azure, GCP) — planned for v2.x; see [docs/roadmap.md](docs/roadmap.md).
+- Production deployment scenarios — DevCloud is a local development tool.
 
-[Unreleased]: https://github.com/skyoo2003/devcloud/compare/main...HEAD
+[Unreleased]: https://github.com/skyoo2003/devcloud/compare/v0.1.0...HEAD
 [0.1.0]: https://github.com/skyoo2003/devcloud/releases/tag/v0.1.0