v0.3.2

A reliability release. No change to results on ordinary projects: the JSON output is identical to 0.3.1 on 20 real repos.

Hangs fixed

• A small workflow file of nested YAML merge keys (<<:) could hang the scan. Such a file is now skipped with a message.
• Routers mounted twice at each level of a deep chain took exponential time. Now linear.

Crashes fixed

• A commit dated past the year 9999 crashed every --with-git scan.
• On Python 3.10 and 3.11, a null byte in one route's annotation made the scan lose every route in the project. One bad file now skips only itself.

Wrong or missing results fixed

• A form feed in a Python file made a # public endpoint comment above a route be read from the wrong line.
• "auth_words": "word" as a string now works, and a broken .deviant/config.json is reported instead of ignored.
• Repositories using SHA-256 commit IDs now get git evidence.
• continue-on-error: ${{true}} without spaces is now recognised.
• A pinned-action finding no longer points at an earlier step that mentions the same action.

Full details: #2