v0.1.0

Changelog

• c01ed51 Sign release checksums with Cosign bundles so GoReleaser works with current Cosign.
• 17857e1 Raise the security score with a full Apache-2.0 license, pinned images, and signed releases.
• 5e2e457 Add CodeQL, Scorecard, and govulncheck so core security scans are public.
• 0db4cac Accept MPL-2.0 in the Snyk policy for Apache-2.0 compatibility.
• 27ee285 Patch Go and AWS/pgx vulns and make Snyk scan go.mod in CI.
• 5c95045 Add Snyk badges, optional Snyk CI, and Dependabot.
• 8b3f038 Emit CIS pack properties from AWS and add a Helm chart.
• 98769f8 Clarify platform audit logs as commercial, not OSS.
• 2378b94 Add a demo graph and embedded CIS-inspired rule packs.
• 078869b OpenSourceOM core — graph-native cloud security platform.