v1.2.0 — drops Node 18, adds repo polish

Minor release. Drops EOL Node 18, formally releases the accumulated repo polish.

⚠️ Breaking

• engines.node bumped to >=20.0.0. Node 18 reached end-of-life April 30, 2025 — the previous >=18.0.0 declaration was claiming support for an unsupported runtime. If you're still on Node 18, pin to @jordannewell/curtis-compliance@1.1.2.

Added

• files allowlist in package.json — explicit list of what ships in the tarball (cleaner than relying on .npmignore denylist alone).
• README hero banner, terminal screenshot, social preview image.
• CI badge in the README badge row.
• CI matrix updated to Node 20 / 22 / 24.

Changed

• Tarball no longer ships source maps (files allowlist narrows dist to *.js/*.d.ts/*.json). Tarball size 35.6 KB → 25.8 KB.
• SECURITY.md supported-versions table updated: 1.2.x ✓, < 1.2 ✗.
• coverage/ added to .gitignore.

Already on master since v1.1.2, now formally released

• SECURITY.md — vulnerability-reporting policy
• CONTRIBUTING.md — not accepting external PRs yet
• .github/FUNDING.yml — Sponsor button
• .github/workflows/ci.yml — test workflow
• Branch protection on master (no force-push, no deletions, linear history)

---

npm: npm install @jordannewell/curtis-compliance@1.2.0