v0.2.1 — Switch to npm Trusted Publishing
Infrastructure-only release: validates the publish pipeline now that npm Trusted Publishing (OIDC) is configured and NPM_TOKEN has been removed.
No source code changes vs v0.2.0 — same grammar, same tests, same dist. The artefact attached to this release is built and published by GitHub Actions via short-lived OIDC credential exchange with npmjs.org, attested by sigstore.