v0.2.0

Public-API hardening, RVA helpers, and scan caching. Breaking
release under Cargo SemVer for 0.x — every breaking
change in a 0.x.y crate is a 0.x minor bump, so the scan-accessor
return-type change and the dropped lifetime parameters on three
structs make this 0.2.0.

Added

• addr module with nimrod::va_to_i64(u64) -> Option<i64> for
  consumers persisting VAs into a signed 64-bit column. Returns None
  when the VA exceeds i64::MAX (TODO §11.6).
• Display impls on every public discriminator enum — Format, Arch,
  GcMode, ShimKind, InitKind, RttiVersion, PathOs. Strings
  match the existing Debug output exactly so consumers persisting
  format!("{:?}", …) don't need a schema migration. The Display
  output is now part of the crate's stable API; future changes are
  breaking (TODO §11.1).
• Container::image_base() and Container::va_to_rva(va) —
  per-format image-base recovery (PE image_base, ELF lowest PT_LOAD
p_vaddr, Mach-O lowest segment vmaddr) plus checked VA→RVA
  translation (TODO §11.2).
• NimBinary::image_base, shim_rva, init_rva, raise_rva,
  rtti_rva — first-class RVA accessors so consumers stop paying the
  va.saturating_sub(image_base) tax (TODO §11.2).
• "Address space" rustdoc section on NimBinary, Container,
  EntryShim, InitFunction, RaiseSite, RttiSymbol,
  ModuleSymbol, StringLiteral, StringLiteralV1 documenting that
  every address field is a VA, not a file offset (TODO §11.3).
• Rustdoc on ModuleInfo::symbol_count confirming usize is always
  representable in u64 on every supported target (TODO §11.4).
• tests/display_stability.rs — snapshot test asserting Display output
  matches Debug for every variant of every public enum.

Changed

• All scan accessors on NimBinary are now lazily cached. Each of
  entry_shims, init_functions, rtti_symbols, string_literals_v2,
  string_literals_v1, stack_trace, nimble_paths,
  exception_types, raise_sites, module_map runs at most once per
  NimBinary instance and returns a borrowed slice (&[T]) or
  reference (&T) on subsequent calls in O(1). Caching uses
  std::sync::OnceLock and is thread-safe (TODO §11.5).
• Breaking. Scan accessors that previously returned Vec<T> now
  return &[T]; module_map and stack_trace return &T instead
  of an owned value. Callers that bound by value should clone
  (.to_vec()) or take by reference.
• Breaking. EntryShim<'a>, InitFunction<'a>, and
  RttiSymbol<'a> lost their lifetime parameter. symbol_name and
  RttiSymbol::type_fragment are now String / Option<String>
  instead of &'a str / Option<&'a str>. This was required to
  make caching tractable inside NimBinary (otherwise the cached
  values would be self-referential through the embedded
  Container). Cost is a handful of short-string allocations per
  binary; the caching gain dominates.
• shims::detect_prefix signature loosened from
  <'a>(&'a [EntryShim<'a>]) -> Option<&'a str> to
  (&[EntryShim]) -> Option<&str> to match the new owned types.

Fixed

• Lint policy uniformity (TODO §11.0). Cleared 232 cargo clippy
  violations introduced when the panic-prevention lint set
  (unwrap_used, expect_used, panic, arithmetic_side_effects,
  indexing_slicing) was added to Cargo.toml. Every site is now
  bounds-checked or uses wrapping_* / checked_* / saturating_*
  arithmetic, with the choice driven by whether overflow is genuinely
  impossible at the call site or could be triggered by adversarial
  input. No behavioral changes — the parser was already correct, just
  not provably panic-free under the new lints.