v3.37.0

# v3.37.0 — proxy install hardening, cloud routing disclosure, tier pinning

## What's in this release

Four independently-reviewed fixes to the Meta LLM Proxy control surface (`ruflo proxy ...`):

- **[#2925](https://github.com/ruvnet/ruflo/pull/2925)** — bumps the pinned meta-proxy release from `0.4.0` to `0.7.3`. The old pin predates the commit that separated authentication from cloud-routing consent (meta-proxy #60, first in v0.7.0) — on `0.4.0`, even a `--version` probe starts the daemon and binds a port. `proxy status`/console guidance now also surfaces when an already-installed binary has drifted behind the current pin, with a one-line `proxy update` prompt.
- **[#2926](https://github.com/ruvnet/ruflo/pull/2926)** — `proxy install` on Windows no longer discards a fully signature-verified archive when PowerShell's `Expand-Archive` fails to autoload its module (intermittent, unrelated to the archive itself). It now falls back to `tar -xf` (bsdtar, ships on Windows 10+), with independent `SafeExecutor` allowlists per extractor and a combined error message if both fail.
- **[#2927](https://github.com/ruvnet/ruflo/pull/2927)** — `ruflo proxy config --cloud` now discloses all three things enabling cloud routing actually decides: who processes the prompt, who pays, and — previously undisclosed entirely — that the cloud plane picks a tier per prompt instead of honoring the client's requested model. New flag: `ruflo proxy config --routing-mode <auto|low|mid|high>` to pin a tier, matching meta-proxy's `RoutingMode` enum (ADR-321 rev-2/rev-3).
- **[#2928](https://github.com/ruvnet/ruflo/pull/2928)** — `--local-only` was the only documented way to leave the cloud plane, but it points at your own local backend — not `passthrough` (meta-proxy's own default, which uses your Claude subscription and is the only plane eligible for ADR-321's automatic quota failover). New flag: `ruflo proxy config --passthrough` restores the subscription plane; `--cloud` now remembers and reports the plane you're leaving so there's always a real "undo" command.

## Versioning note

Minor bump (not patch) — #2927 and #2928 add backward-compatible CLI flags (`--routing-mode`, `--passthrough`), not just bug fixes. No breaking changes; a user who never touches `proxy config` sees no behavior change.

## Verification

- All three packages (`@claude-flow/cli`, `claude-flow`, `ruflo`) published at 3.37.0 with `latest`/`alpha`/`v3alpha` dist-tags aligned — verified via `npm view <pkg> dist-tags --json`.
- 64/64 proxy-suite tests passing, `tsc --noEmit` clean, `pnpm install --frozen-lockfile` verified in the `v3/` workspace.
- Each PR independently reviewed against its own claims (not just its description) before merge; one factual inaccuracy caught and fixed in #2927's disclosure text pre-merge (a "which plane you're currently on" claim that didn't hold for `--local-only` users).

🤖 Generated with [RuFlo](https://github.com/ruvnet/ruflo)