chore(main): release 0.14.0

[github-actions]

🤖 I have created a release beep boop

0.14.0 (2026-09-09)

Features

• audit: let a deployment stop auditing what a pull-through captures (df9d16b)
• upstreams: route by priority and package-name globs, not by alphabet (7090b26)

Bug fixes

• http: report a database outage during authentication as 503, not 401 (5efe726)
• npm: drop an upstream's cached index after a lazy per-name sync (7874fdd)
• npm: resolve a tarball-first miss in one pass over its lookups (c70674b)
• publish: render an index on the transaction's own connection, not a second pooled one (7288647)
• pull-through: only load one package name's upstream rows when regenerating an npm index (6cff5ab)
• pull-through: resolve an npm tarball miss by package name, not by filename alone (909ee39)

Performance

• upstreams: upsert synced upstream packages in batched statements (d8ff9d9)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• v0.14.0

🌻