v0.4.4 - Professional Scanner Release

Professional scanner upgrade with bounded JS/TS module graphs, cross-file taint analysis, attack-chain aggregation, dependency graphs, CycloneDX/SPDX SBOM, capability graphs, and provenance reporting. Includes TypeScript module-graph degradation and .js-to-.ts resolution fixes, auxiliary-layer completeness handling, stable finding fingerprints, false-positive reductions, and release hardening. Verified with 200 passing tests, a 32-case benchmark, six pinned real-world DSH repositories, and packed-tarball CLI smoke testing. Published to npm as deepseek-harness-sentinel@0.4.4.