chore(release): bump to v0.41.0-beta.3

[joepio]

Version bump 0.41.0-beta.2 -> 0.41.0-beta.3 across all 15 version sites (scripts/bump-version.mjs, --check passes), regenerated Cargo.lock (cargo update --workspace) and pnpm-lock.yaml (unchanged, workspace links), and moved the UNRELEASED sections of both changelogs under ## [v0.41.0-beta.3] - 2026-09-01.

No tag is created by this PR. After merge, tag the merge commit on develop with v0.41.0-beta.3.

Headline changes since v0.41.0-beta.2

• atomic_lib: new runtime::AtomicNode boundary over Db with IngestPolicy::{Hub, Peer, Replica, LocalCache}; WASM ClientDb is the first adapter (feat(lib): AtomicNode runtime boundary (slice 1) #1324).
• Built-in defaults now re-seed add-only on every store open via a fingerprint, so new Properties/Classes reach existing stores (fix(populate): re-seed built-in defaults on Db open via a fingerprint #1323).
• Sync trust gaps closed: AUTH before SYNC, SUBSCRIBE rights checks, loud SYNC_PUSH rejection (Close sync trust gaps: AUTH-before-SYNC, SUBSCRIBE rights, loud SYNC_PUSH rejection #1321); plus the fixes from running two sync nodes against each other (fix: everything found running two sync nodes against each other #1286).
• Public FOSS nodes gated: a server can be reachable without hosting strangers (Gate public FOSS nodes: a server can be reachable without hosting strangers #1303).
• Cloud Server enrollment challenge is now signed (feat(managed): sign the Cloud Server enrollment challenge #1322).
• Git/CI: single develop branch plus stable v* tags; Playwright runs light on branches, full on develop and tags.
• Browser: v1 documents migrate silently to the Loro editor instead of throwing (Silently migrate v1 documents to Loro instead of throwing #1295); adopted HTTP drives no longer hijack the home server.
• Browser: tables and sidebar no longer flash rows in the wrong order; OPFS snapshot double-import fixed; totals re-query after a cell edit; rows that scroll away before saving are no longer lost.
• Browser: "private drive" naming and presentation across the UI; drive creation refuses early when the drive cannot be listed.
• Dev: React Compiler runs through native oxc-transform-react, Babel removed from the Vite pipeline; navbar focus-outline fix.
• Canvas (Flutter): keeps the drawing open on rotation, undo-bootstrap race fixes, faster canvas open.

https://claude.ai/code/session_019asLKBrBWY5ovyeCgtmdSd