Update release process

Signed-off-by: Bryan Frimin <bryan@probo.com>

contrib/claude/release/README.md

@@ -1,6 +1,6 @@
 # Release
 
-The repository ships seven independently-versioned tracks. Each has its own
+The repository ships eight independently-versioned tracks. Each has its own
 version source, its own `CHANGELOG.md`, its own tag pattern, and its own
 release workflow. Cutting a release means: bump the version, write a
 changelog entry, commit, tag, push.
@@ -11,6 +11,7 @@ changelog entry, commit, tag, push.
 | Server (`probod` group) | `probod/v*`                    | [probod.md](./probod.md)         |
 | `probod-bootstrap`      | `probod-bootstrap/v*`          | [probod-bootstrap.md](./probod-bootstrap.md) |
 | `proboctl`              | `proboctl/v*`                  | [proboctl.md](./proboctl.md)     |
+| `probo-agent`           | `probo-agent/v*`               | [probo-agent.md](./probo-agent.md) |
 | `@probo/n8n-nodes-probo` | `@probo/n8n-nodes-probo/v*`   | [n8n-nodes-probo.md](./n8n-nodes-probo.md) |
 | `@probo/cookie-banner`  | `@probo/cookie-banner/v*`      | [cookie-banner.md](./cookie-banner.md) |
 | Helm chart (`probo`)    | `helm/v*`                      | [helm.md](./helm.md)                   |
@@ -63,6 +64,10 @@ git log $(git describe --tags --abbrev=0 --match='probod-bootstrap/v*')..HEAD --
 git log $(git describe --tags --abbrev=0 --match='proboctl/v*')..HEAD --oneline \
   -- cmd/proboctl pkg/proboctl
 
+# probo-agent
+git log $(git describe --tags --abbrev=0 --match='probo-agent/v*')..HEAD --oneline \
+  -- cmd/probo-agent pkg/deviceagent
+
 # @probo/n8n-nodes-probo
 git log $(git describe --tags --abbrev=0 --match='@probo/n8n-nodes-probo/v*')..HEAD --oneline \
   -- packages/n8n-node

contrib/claude/release/probo-agent.md

@@ -0,0 +1,41 @@
+# Release `probo-agent`
+
+After confirming commits below, follow the
+[common steps](./README.md#3-common-steps-every-track).
+
+## Track facts
+
+- **Tag pattern**: `probo-agent/v*`
+- **Version source**: `cmd/probo-agent/VERSION` (single `X.Y.Z` line)
+- **Version bump**: Edit `cmd/probo-agent/VERSION` directly
+- **Changelog**: `cmd/probo-agent/CHANGELOG.md`
+- **Files to stage**: `cmd/probo-agent/VERSION`, `cmd/probo-agent/CHANGELOG.md`
+- **Workflow**: `.github/workflows/release-probo-agent.yaml`
+- **Path filter**: `cmd/probo-agent pkg/deviceagent`
+
+## Detect commits
+
+```shell
+git log $(git describe --tags --abbrev=0 --match='probo-agent/v*')..HEAD --oneline \
+  -- cmd/probo-agent pkg/deviceagent
+```
+
+If empty or non-user-facing only, do not release this track.
+
+## Build
+
+```shell
+make bin/probo-agent
+```
+
+## Notes
+
+CI builds binaries for 8 OS/arch targets (linux, darwin, and windows on
+amd64 and arm64; freebsd on amd64 and arm64), publishes a GitHub
+Release with signed checksums, SBOM, and build attestations. The agent
+auto-update path downloads the matching archive plus `checksums.txt` and
+verifies the cosign bundle before installing.
+
+macOS `.pkg` installers are built locally with
+`cmd/probo-agent/installer/macos/build.sh` (requires macOS and a
+pre-built binary). They are not part of the GitHub Release workflow yet.