v0.0.33-patch.4

fix(translate): preserve empty lists as [] instead of omitting from JSON

When a list/set attribute like `policy_scope = []` was empty, the
toCloudControl serializer returned nil, causing the field to be omitted
from the JSON patch document entirely. This meant the Cloud Control API
never received the PolicyScope field for global-scope policies, so they
were silently not attached during group updates.

Return an empty slice instead of nil so "PolicyScope": [] is included
in the JSON, matching what the API expects.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

v0.0.33-patch.3

fix(iam): route IAM resources through cn-beijing CloudControl endpoint

Volcengine IAM is a global service anchored to cn-beijing. The Cloud Control
API at cloudcontrol.<region>.volcengineapi.com rejects IAM requests for any
other region with "RegionNotSupport". This patch:

- Adds a globalService flag to genericResource with IsGlobalService() builder
- Creates a second CloudControl session targeting cn-beijing for global services
- Marks all IAM resources (user, group, role, policy, accesskey, project)
  as global services
- Adds workflow_dispatch trigger to release workflow
- Adds AGENTS.md fork maintenance guide

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

v0.0.33-patch.2

fix(iam/group): use global CloudControl endpoint for global services

Global services like IAM Group must use cloudcontrol.volcengineapi.com
(no regional subdomain) instead of the regional endpoint. Sending any
request to cloudcontrol.cn-shanghai.volcengineapi.com causes:
  RegionNotSupport: service [iam] not support region [cn-shanghai]

Add GlobalCloudControlAPIClient to providerData and the Provider interface,
initialized with endpoint cloudcontrol.volcengineapi.com. genericResource
selects the global client when globalService=true.

v0.0.33-patch.1

fix(iam/group): use global CloudControl endpoint for global services

Global services like IAM Group must use cloudcontrol.volcengineapi.com
(no regional subdomain) instead of the regional endpoint. Sending any
request to cloudcontrol.cn-shanghai.volcengineapi.com causes:
  RegionNotSupport: service [iam] not support region [cn-shanghai]

Add GlobalCloudControlAPIClient to providerData and the Provider interface,
initialized with endpoint cloudcontrol.volcengineapi.com. genericResource
selects the global client when globalService=true.