Bump version to 1.0.2

- Add scripts/bump-version.sh for semver patch increments
- Update AGENTS.md Dev Commands section and add Version Bumping docs
- Makefile default VERSION bumped to 1.0.2

AGENTS.md

@@ -7,12 +7,11 @@ Go monolith (single binary) with embedded React SPA frontend. Targets Linux amd6
 ## Dev Commands
 
 ```bash
-# Local dev build (macOS)
-make build-local
+# Clean build and package (Linux amd64)
+make clean && VERSION=X.Y.Z make package
 
-# Production Linux amd64 build
-make build        # → packaging/debian/usr/bin/syncserver
-make deb          # → dist/syncserver_VERSION_amd64.deb
+# Build only (no package), Linux amd64
+make build-all
 
 # Run
 ./syncserver --data-dir ./data --addr :8080 \
@@ -22,6 +21,31 @@ make deb          # → dist/syncserver_VERSION_amd64.deb
 go test ./...
 ```
 
+## Version Bumping
+
+Before each push that contains user-facing changes, run the version bump script:
+
+```bash
+./scripts/bump-version.sh
+```
+
+This reads the current version from `cmd/server/main.go`, increments the patch number (semver), and updates both `cmd/server/main.go` and `Makefile`. Then commit and push:
+
+```bash
+git add cmd/server/main.go Makefile
+git commit -m 'Bump version to X.Y.Z'
+git push
+```
+
+The `DEBIAN/control` uses `@@VERSION@@` placeholder and is substituted at `make package` time — no manual edit needed.
+
+To verify the LXC is running the expected version:
+
+```bash
+ssh root@10.5.1.30 '/usr/bin/syncserver --version'
+ssh root@10.5.1.30 'journalctl -u syncserver -n 3 --no-pager'
+```
+
 ## Critical Build Order
 
 1. Frontend must be built FIRST: `cd web && npm run build`