fix: package.json version drift (0.0.16 -> 0.0.18)

[asachs01]

Summary

• release.yml derives the published version from the git ref only (no package.json validation), so v0.0.17 and v0.0.18 both shipped while package.json still said 0.0.16.
• Bumps to 0.0.18, the fork's first real release (v0.0.17 failed CI on the canvasFormControls flake — fixed in fix(test): canvasFormControls test-order flake - test never asserted its own canvasView precondition #7 — and never produced a release artifact, so it doesn't get its own changelog entry).
• Moves CHANGELOG.md's Unreleased content under a dated ## 0.0.18 - 2026-09-08 heading to match.
• Low-priority housekeeping (task_1788901554010_21350406) — harmless drift, fixed via normal reviewed PR per the task's own instruction.

Test plan

• npx tsc -b — clean
• bun test — 6601 passing / 0 failing / 1 skipped across 721 files (the act(...) warnings and one mock-API 500 log in the output are pre-existing noise from ExportDialog's own test setup, unrelated to this change — a version-string-only diff)

---

Task-ID: task_1788901554010_21350406
Agent: dev

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: c19a07c8-b00b-4017-93e0-72d8039a739e

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}