feat(integrations): external SafeRunner with optional trace (v0.2.0)

[DevStrikerTech]

Summary

Extend SafeRunner for framework-agnostic external pipelines: accept callables or .run(dict) targets, coerce inputs/outputs to plain dicts (including Mapping and duck-typed model_dump()), optional include_trace=True returning PipelineResult with a minimal external step trace, and wrap non-Oris exceptions without chaining __cause__. Updates PUBLIC_API.md and integration tests.

Set package version to 0.2.0 in pyproject.toml per release request.

Type

• feat — new capability
• fix — bug fix
• refactor / perf — behavior-preserving change
• test — tests only
• docs / chore — docs or tooling

Links

• Tracking:
• Related PRs / context: SafeRunner external pipeline integration

Branch policy

• Base branch is dev (never prod except release mechanics agreed separately).
• Source branch is feat/<name> or fix/<name>.

Checklist

• Follows CONTRIBUTING.md (branch flow, quality gates, commit message format).
• Links to related issues or Project items where applicable.
• Tests added or updated for behavior changes.
• Docs updated when user-visible behavior or public API changes.
• ruff check src tests and ruff format --check src tests pass locally.
• mypy src/oris tests passes locally.
• pytest passes with coverage ≥ 84%.
• No secrets, tokens, or credentials in the diff.

How to verify

ruff check src tests && ruff format --check src tests
mypy src/oris tests
pytest
python -m pip install build twine && python -m build && twine check dist/*

Risk / rollout

PyPI: oris-ai 0.2.0 already exists on PyPI. Uploading another artifact for 0.2.0 will be rejected. To publish this code, bump to a new version (above current PyPI latest) and push tag v* per publish workflow.