v0.9.4

Security rebuild: built with Go 1.27.3 to distrust the compromised eMudhra intermediate CAs (GO-2026-6809 / CVE-2026-111943). No functional code changes.

What's Changed

• Fix govulncheck SARIF upload failures by @JaredHatfield in #87
• build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #86
• Update Go version to v1.27.2 by @JaredHatfield in #88
• build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 by @dependabot[bot] in #91
• build(deps): bump the codeql group with 3 updates by @dependabot[bot] in #90
• Update Go version to v1.27.2 by @JaredHatfield in #92
• build(deps): bump golang.org/x/term from 0.46.0 to 0.47.0 by @dependabot[bot] in #89

Full Changelog: v0.9.3...v0.9.4