CanaryProbe v0.1.0

Honeytoken tripwire for closed-source coding agents: plant decoy hostnames + fake credentials in an air-gapped/local-model deployment, and alarm the instant a closed binary resolves or connects one — with signed, tamper-evident JSONL audit + a clean/TRIPPED evidence report. Python 3.12 CLI (init | plant | watch | report). 47 tests.

诱饵探针：给读不到源码的闭源 coding agent 埋下诱饵主机名与假凭证，一旦二进制去解析/连接就在运行期告警并留下可核验的签名审计证据。