v0.5.4

Security rebuild: built with Go 1.27.3 to distrust the compromised eMudhra intermediate CAs (GO-2026-6809 / CVE-2026-111943). No functional code changes.

What's Changed

• Fix govulncheck SARIF upload failures by @JaredHatfield in #180
• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #179
• Update Go version to v1.27.2 by @JaredHatfield in #181
• chore(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 by @dependabot[bot] in #184
• chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #183
• Update Go version to v1.27.2 by @JaredHatfield in #185

Full Changelog: v0.5.3...v0.5.4