Bump ortho_config from 0.8.0 to 0.9.0

[dependabot]

Bumps ortho_config from 0.8.0 to 0.9.0.

Changelog

Sourced from ortho_config's changelog.

Changelog

All notable changes to this project will be documented in this file.

Unreleased

Added

• Support dependency aliasing via #[ortho_config(crate = "...")] attribute on OrthoConfig and SelectedSubcommandMerge derive macros (closes #291).
• Re-export figment, uncased, xdg, and optional format parsers to simplify dependency graphs for consumers.
• Forward json5, yaml, and toml feature flags to ortho_config_macros, so macros compile with matching support.
• Introduce the #[ortho_config(discovery(...))] attribute to customize config discovery (filenames, environment overrides, and the generated CLI flag) and expose the new flag in the hello_world example.
• Add the OrthoConfigSubcommandDocs trait and derive so subcommand enums can emit per-variant documentation metadata.
• Populate recursive DocMetadata.subcommands values from OrthoConfig structs that hold a #[command(subcommand)] field.
• Add behavioural fixtures and step definitions covering nested subcommand trees (ortho_config/tests/features/docs_ir_nested.feature).
• Add renderer compatibility tests and insta golden snapshots for populated nested-subcommand DocMetadata (cargo-orthohelp/tests/golden/nested_subcommand_snapshots.rs).
• Add SkillManifest, SkillCommandRef, and the AgentContext.skill_manifests field for declaring downstream skill manifests in agent context (roadmap item 6.3.1).
• Add the public LocalizedParse blanket trait so any clap::Parser can parse arguments with localized command metadata and parse errors.
• Add the public parse_localized_command helper for applications that need to parse an already-localized clap::Command with a custom message-id base.
• Introduce the EnvSource trait so configuration discovery reads the environment through an injectable seam instead of ambient std::env calls; add MapEnv and process_env_source(), and the ConfigDiscoveryBuilder::env_source(...) method to inject a source. The default remains the live process environment, so existing callers are unaffected (closes #410).
• Emit structured tracing events at each configuration-discovery decision point (source selection, selector resolution, XDG/Windows/home resolution, attempt/candidate/outcome), drawn from a closed vocabulary that never carries environment values, paths, or file contents. A successful discovery.load event also carries source, naming the rung that produced the winning candidate.
• Add the optional metrics feature, emitting ortho_config.discovery.attempts, ortho_config.discovery.outcomes, and ortho_config.discovery.candidate_failures counters through the metrics facade. The feature is off by default and installs no recorder.

... (truncated)

Commits

• 9fba1ed Bump version to v0.9.0
• 9323755 Overhaul v0.9.0 user documentation (#422)
• ef3a00d Chore(deps): Bump toml from 0.9.8 to 1.0.4+spec-1.1.0 (#425)
• 802d6e4 Chore(deps): Bump thiserror from 2.0.18 to 2.0.19 (#424)
• a261ccc Chore(deps): Bump serde from 1.0.228 to 1.0.229 (#423)
• 2ff35cf Chore(deps): Bump proc-macro2 from 1.0.106 to 1.0.107 (#406)
• d3c9bdf Add an injectable environment source for configuration discovery (#410) (#411)
• 796c2bd Format docs/execplans/6-2-2-version-and-validate-the-agent-context-schema.md
• 25672ae Require rust-analyzer
• c366bef Add Whitaker user's guide
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codescene-access]

No quality gates enabled for this code.