First CI release via Trusted Publishing (OIDC, tokenless). Publishes @consiliency/spec (npm, with provenance) + consiliency-spec (PyPI). No source changes from 0.1.0 — the 0.1.0 npm publish was the manual bootstrap that created the package so the trusted publisher could attach; this is the first fully-governed release across both registries.