v0.2.2 - test rigor & auth-state fix

Fixed

• authInfo misreported ghAuthenticated: true when gh was unauthenticated AND no git credential existed; auth state is now a three-way resolved object with an explicit "no credential found" startup warning
• github_api paginate parameter description now matches the behavior (--paginate --slurp applied together)
• SECURITY.md credential table rendering

Changed

• integration.mjs rewritten as a hermetic assertion suite (recording fake runner, 34 hard assertions, non-zero exit on failure)
• selfcheck.mjs gains runner-internal tests: truncation with real on-disk spill verification and command-display quoting
• apply(ctx, config, runner?) optional runner injection for hermetic tests

Full changelog: https://github.com/Planckbaka/dsh-plugin-github-workflows/blob/main/CHANGELOG.md