v3.1.0

Changelog

• 22ab340 ci: add release workflow that gates tags before publishing artifacts
• 1906e1e ci: run build, vet and race tests on pull requests
• 8b102fb feat: add -v and --version alongside the version subcommand
• 961d7fc fix(ci): release gate used an invalid git depth and would block every release
• 2f22fa2 fix: close seven high-severity defects from the v3.0.0 audit
• 98dbb06 fix: close the five critical defects found in the v3.0.0 audit
• 597c73c fix: close the five medium-severity defects from the v3.0.0 audit
• f4b0f10 fix: move module path to /v3 so go install can reach the current release
• 5b21466 fix: per-repo access restrictions were inert on public collections