codesteward-taint v0.1.0

Added

• Initial release of the three-level taint-flow analysis engine
• Level 1: Neo4j Cypher-based CALLS graph traversal
• Level 2: intra-procedural variable tracking via tree-sitter AST parsing
• Level 3: CFG path-sensitive analysis with forward dataflow worklist algorithm
• Index-based CFG construction (no pointer cycles) for Python, TypeScript, Java, Go
• Embedded YAML source/sink/sanitizer catalogs for FastAPI, Flask, Django, Express, NestJS, Spring, and Go net/http
• --catalog-dir flag for custom catalogs; --no-builtin-catalogs flag to replace built-ins entirely
• Catalog deduplication by (framework, language, name, match) composite key
• Three match modes: exact, contains, regex
• TAINT_FLOW edges written to Neo4j via MERGE (idempotent re-runs)
• Optional BasicBlock / CFG_EDGE persistence via --persist-cfg
• YAML, JSON, and text output formats
• --stub dry-run mode (no Neo4j writes)
• Cross-compiled release binaries for linux/amd64, linux/arm64, darwin/arm64, darwin/amd64, windows/amd64