v0.1.0 — canon as a CI gate

First release: composite action wrapping canon — verify gates canon.lock for drift/poisoning/publisher trust; scan poison-scans manifests, skill dirs, or a cloned marketplace repo. Zero third-party action dependencies; canon installed at the ref you pin (canon-ref, default v0.6.1). Use askalf/canon-action@v1.