Prepare AzureFox v1.0.0 release

[TacoRocket]

What changed

• added a secure tag-driven release workflow for GitHub Releases plus PyPI Trusted Publishing
• bumped AzureFox package metadata from 0.1.0 to 1.0.0
• rewrote the changelog to describe the real public 1.0.0 release boundary
• updated README quickstart/install guidance for public package installs while preserving local development paths

Why

AzureFox is now useful enough to release as a real reconnaissance tool. This PR prepares main for the first public v1.0.0 tag so the release can be built from the canonical branch and published without long-lived PyPI secrets.

Security notes

• PyPI publishing uses Trusted Publishing via GitHub OIDC rather than a stored API token
• the release workflow is split into least-privilege jobs
• the PyPI publish job is isolated behind the pypi GitHub Actions environment

Validation

• python3 -m ruff check src tests scripts
• PYTHONPATH=src python3 scripts/generate_schemas.py
• PYTHONPATH=src python3 -m pytest tests/test_collectors.py tests/test_golden_outputs.py tests/test_contract_schemas.py tests/test_cli_smoke.py tests/test_help.py tests/test_terminal_ux.py tests/test_models.py
• PYTHONPATH=src python3 -m pytest
• /tmp/azurefox-release-venv/bin/python -m build
• fresh venv wheel install + azurefox help + fixture-backed whoami smoke at 1.0.0
• pre-push guardrail: python3 -m ruff check . and python3 -m pytest -m "not integration"