v0.12.0

🔒 Security

• Docker image rebuilt on distroless/static: the binary is now linked statically against musl
  (it was already OpenSSL-free via rustls), so the runtime image carries no shell, package manager or
  OS libraries. Trivy findings drop from 250 (4 critical, 55 high, from debian:bookworm-slim) to
  none beyond base-image data updates; the image shrinks from 135 MB to 14 MB. It still runs as
  non-root (uid 65532 instead of the dakera user). (#157)

🐛 Fixed

• LICENSE detected as MIT: removed the extra SPDX header and folded the author line into the
  copyright line, so GitHub (and registries that read it, such as Glama) identify the license
  instead of reporting it as unidentifiable.
• Docker dependency caching: the dependency pre-build stage now stubs src/lib.rs too; it was
  failing silently, so every image build recompiled all dependencies.

Full Changelog: v0.11.0...v0.12.0