Cejel 0.4.6

Cejel 0.4.6 publishes a versioned generic ingest contract: --ingest now accepts a stable, schema-published version: "1.0" document with additive-minor / breaking-major compatibility rules, and rejects an unversioned, malformed, or unknown-major document loudly instead of guessing at it. The formalized adapter replaces a de-facto contract that had no version at all — it previously defaulted missing or non-finite weights, silently dropped unknown dimensions/severities, and invented missing finding identity.

Security hardening: the GitHub Action now runs every invocation in a fresh directory outside the scanned repository, so a committed .cejel/summary.json can no longer leak into the job summary or outputs on an early CLI failure. The existing repository-content size cap now applies uniformly to Git-tracked inventory, all four public ingest paths share one symlink/realpath-safe file validator, and public ingest is explicitly bounded (128 documents / 8 MiB per document / 10,000 findings). The disclosure-boundary guard gains a scheduled full-tree consistency mode alongside its existing pull-request check.

Two finding-wording fixes: the B6 human-gate finding now states the file-scoped proxy it actually computed rather than reading as a repository-wide claim, and current-rubric directory-fallback wording is now scope-honest about what it did and didn't consult.

Certificate legibility work is explicitly deferred to 0.4.7 — no further slice lands in this release.

Full changelog: https://github.com/BargLabs/cejel/blob/v0.4.6/CHANGELOG.md