v1.2.0

What's Changed

Features

• Webhook security validation chain — installation filter + HMAC token + repo ownership check (#58)
• /health now exposes installation_id scope (#58)

Fixes

• Hit rate now includes acknowledged findings so hit rate + noise rate sum to 100% (#64)
• Async context manager lifecycle on GitHub API clients (#62)
• Guard active_reviews cleanup against aclose() failure in finally block
• CI workflow permissions (#55)

Refactors

• httpx.AsyncClient injected into GitHub API clients for testability; PyGithub removed (#62)
• Removed unused INSTALLATION_IDS setting (#62)

Docs

• Multi-broker deployment and webhook security documentation (#57)