CipherGate v0.14.0

Adds --extension-format for mixed directories and tests the optional NER detector against a real Presidio install. No existing behaviour changes.

Added

• --extension-format EXT=FORMAT on inspect, plan, sanitize and rescan (repeatable) reads files with that extension as FORMAT, for directories and single files. It adds unknown extensions or replaces built-in ones, and cannot be combined with --format. The Python API takes RuntimeSettings(extension_formats=...).
• Tests that run the optional NER detector against a real Presidio install with the en_core_web_sm model, including a sanitize run with network access disabled. They skip when Presidio is not installed. A new non-required CI job, ner, installs the extra and a hash-pinned model and runs them.

A successful run means the configured processing completed under the selected policy. It does not prove that the output contains no sensitive information.