0.1.6: installs without a toolchain, five wrong answers fixed

This release closes six findings, five from running the tool over other people's projects and one from this repository's own Action reviewing its own pull request.

The install command in the README was broken on a clean machine. npm prepares a git dependency in a throwaway clone, the dev toolchain is not there, and prepare died on tsup: not found. The bundle is now committed, prepare rebuilds only when it can, and CI rebuilds plus fails on drift, then installs the package into an empty project.

• SIA004 stopped reporting functions that sit in the projection or GROUP BY while the WHERE clause is fine
• no more DDL for runtime-built table names such as device_message_${deviceId}
• "pass --schema" is no longer shown to someone who passed one
• the same column set written in another order is one index, not two
• a composite made only of flag columns is capped at info, with the ratio query

Full detail in the changelog.