v0.2.0

• Coding companions: init detects Cursor, Windsurf, GitHub Copilot, Cline,
  Kilo Code, Roo Code, Continue, Junie, Kiro, Amazon Q, Zed, opencode, Aider,
  Gemini CLI, Codex and Claude Code. It writes each one's native rules file and,
  with --mcp, its MCP config (--for <ids|all|list>).
• Tracked tools: 29 total, adding Cursor, GitHub Copilot Chat, Kilo Code, Amp,
  Auggie, Factory Droid, Junie, CodeBuddy, Letta Code, Mistral Vibe, Grok CLI,
  Zed, gptme, SWE-agent and the Agent Client Protocol SDKs.
• Security: strict name and version validation, so manifests can't be
  injected into. Local MCP tools are confined to the project. The HTTP connector
  binds to localhost by default and has an origin allow-list, a rate limit and
  size caps. SHA-pinned actions and least-privilege workflows. Added SECURITY.md,
  CODEOWNERS and contributor docs.
• The Action generated by init is pinned to a release tag.