v0.2.5

Security rebuild: built with Go 1.27.3 to distrust the compromised eMudhra intermediate CAs (GO-2026-6809 / CVE-2026-111943). No functional code changes.

What's Changed

• Fix govulncheck SARIF upload failures by @JaredHatfield in #93
• build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #92
• Update Go version to v1.27.2 by @JaredHatfield in #94
• build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 by @dependabot[bot] in #96
• build(deps): bump the codeql group with 3 updates by @dependabot[bot] in #95
• Update Go version to v1.27.2 by @JaredHatfield in #97

Full Changelog: v0.2.4...v0.2.5