Release 0.8.0

The Windows installer has never shipped under a version: v0.7.0 was tagged
before any of it existed, so every build handed out so far stamped a server with
0.7.0. Two servers running different builds were indistinguishable, and the
installer logged each upgrade as "same version already installed" rather than
recording what changed. This cuts the release that fixes that.

0.8.0 rather than a patch: the air-gapped installer is a new capability, and
pre-1.0 semantic versioning puts that in the minor slot (ADR-007).

CHANGELOG gains a 0.8.0 section covering the twelve defects a real Windows
Server 2019 install surfaced, the move from inferring "is this a re-run of my
install?" to recording it, and the operator documentation.

deploy/site-profile-universal.json is now in the repository. Released builds
were being produced from a profile in a temporary directory, so the next release
could not have been reproduced once that file was cleaned up.
docs/RELEASING-WINDOWS.md points at the committed profile and says why.

scripts/gen_openapi.py reads __version__ out of shopdb/__init__.py instead of
restating it. Its hardcoded copy had already drifted a release behind, which is
the same mistake that once shipped an installer stamped with the wrong version.

docs/RELEASING-WINDOWS.md

@@ -24,9 +24,16 @@ Almost every release is the first kind.
 
 ```bash
 # bump __version__ in shopdb/__init__.py first
-./deploy/windows/installer/build-installer.sh <site-profile.json> <repo-path>
+./deploy/windows/installer/build-installer.sh deploy/site-profile-universal.json <repo-path>
 ```
 
+`deploy/site-profile-universal.json` is the profile released builds come from:
+every bundled plugin, so one `.exe` serves any site and the operator ticks what
+that site uses. Build from a narrower profile only when a site genuinely needs a
+lean build (ADR-013). Do not build a release from a profile that is not in the
+repository - the build stops being reproducible the moment that file is
+somewhere else.
+
 Then on Windows, in `deploy/windows/installer`:
 
 ```

docs/openapi.json

@@ -2,7 +2,7 @@
  "openapi": "3.1.0",
  "info": {
   "title": "ShopDB Flask API",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Asset-management API (core + plugins). Responses use a `success_response` envelope: `{status, data, meta}`. Auth: Bearer JWT (login or a managed PAT) for `jwt`/`admin`/`permission:*`; `X-API-Key` for collector/managed-token endpoints; public endpoints need neither."
  },
  "servers": [