Release 0.2.21; track the StartOS version files

Cut version 0.2.21 (current = v_0_2_21) with the adjudicated DO-item fixes.
Also commits the previously-untracked v_0_2_* version files that
versions/index.ts imports (ROADMAP item D2), so a fresh checkout builds
without dangling imports. The missing v_0_2_2 is intentional (versions are
an unordered set).

Built and verified: ten31portal_x86_64.s9pk packs cleanly at 0.2.21:0,
arch x86_64, SDK 0.4.0.

deploy/startos/install/versions/v_0_2_14.ts

@@ -0,0 +1,14 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_2_14 = VersionInfo.of({
+  version: '0.2.14:0',
+  releaseNotes: {
+    en_US:
+      'User administration from StartOS Actions: Create User, Reset Password, List Users, and Delete User. New role layout — Managing Partner (full access incl. sign-off), Operations (full access except sign-off), Fund Admin. The built-in Service Admin can be reset but never deleted.',
+  },
+  migrations: {
+    // Adds users.is_service_admin and flags the bootstrap admin; applied by Alembic on startup.
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})