v1.0.0

Initial release of seal, a CLI for pinning and verifying local agent/tooling bundles with deterministic hashes.

Highlights:

• seal init, seal pin, and seal verify
• Lockfile-based bundle integrity checks
• Discovery patterns for common agent directories and file roots
• Block/warn verification policies
• JSON and quiet verification output
• Cross-platform release workflow with signed source history
• Extensive regression coverage for lockfile validation, discovery boundaries, symlinks, and targeted pin behavior