v0.2.4

Changelog

• cd371ba Merge pull request #23 from Laaaaksh/gnhf/get-writ-ready-for-p-e732ec
• 9d4dafc gnhf 59: Discovered and fixed a security-readiness defect missed by all 58 prior iterations: released writ binaries were compiled by EOL Go 1.22 because both workflows resolve their toolchain from go.mod's go directive, so the directive was bumped to supported Go 1.26 with full validation.
• 0bb5504 Merge pull request #22 from Laaaaksh/gnhf/get-writ-ready-for-p-e732ec
• 6ca76d0 gnhf 57: Audited the never-checked live Homebrew formula with Homebrew's own tooling, found brew style/brew audit --strict offenses, and fixed the two configurable ones in .goreleaser.yml (article-leading description, non-idiomatic test block), proving the corrected formula style-clean and its test block executable end to end.
• e66c598 Merge pull request #21 from Laaaaksh/gnhf/get-writ-ready-for-p-e732ec
• ff623d0 gnhf 54: Audited whether iterations 52–53's durable discoveries had propagated into project memory, found AGENTS.md silent on both master's new branch-protection regime and the CodeQL workflow, and recorded both concisely in AGENTS.md after re-verifying full public-release closure at HEAD (build/vet/gofmt/tests green, all CI+CodeQL runs successful, v0.2.3 still latest release, 0 open PRs/issues/code-scanning alerts, local == origin/master == 6e7537c).
• 6e7537c Merge pull request #20 from Laaaaksh/gnhf/get-writ-ready-for-p-e732ec
• 0e2ae6b gnhf 52: Closed the last unaudited security-posture surface — GitHub code scanning was never configured despite iterations 43–46 enabling every other security feature — by adding a validated advanced-setup .github/workflows/codeql.yml (least-privilege, codeql-action@v4, go+actions languages) after the default-setup API rejected the repo's OAuth token.
• b52a8df Merge pull request #19 from Laaaaksh/docs/contributing-fork-pr-flow
• 2ed1c67 docs: document fork-and-PR contribution flow under branch protection
• 6a5ecab Merge pull request #18 from Laaaaksh/gnhf/get-writ-ready-for-p-e732ec
• e15e104 gnhf 49: Closed iteration 46's flagged at-tag @v7 proof by acting on the sole warning annotation from the v0.2.3 GoReleaser run — pinning goreleaser-action's deprecated version: latest to "~> v2" in release.yml — and completed the never-checked pkg.go.dev verification for v0.2.3 plus fresh closure sweeps.