v0.1.0

Initial release of the govulncheck reachability analyzer as a standalone Bomly plugin. It runs govulncheck (golang.org/x/vuln) over each Go module in a scan and annotates Bomly's vulnerability findings with symbol- and package-tier reachability, with on-disk result caching. The same analyzer ships embedded in the full Bomly CLI build; this plugin packages it for lite builds and external-plugin hosts. Requires a Go toolchain on PATH.