v0.8.2 — stop the PartiallyResolved hot loop

Fixed:
- GoAlertSchedule diffs targets (and their rules) against GoAlert and
  writes only what differs, instead of rewriting every target on every
  reconcile.
- Dependency-wait states back off from 30s to a 10-minute ceiling
  instead of polling forever. Applies to PartiallyResolved,
  AllUnresolved, UserNotFound and BlockedByDependency across all five
  resource controllers.

Changed:
- GetScheduleTargets query document now selects each target's rules.
  Operation count unchanged at 41; regenerate the API key via
  scripts/create-api-key.sh. Graceful fallback on an un-rotated key.

Security:
- golang.org/x/text 0.39.0 (GO-2026-5970), golang.org/x/net 0.56.0
  (GO-2026-5026), Go builder image 1.26.5.