v0.9.2: tools: never write into the indexed checkout by default

Report generation is opt-in: index_repository, generate_report, and visualize no longer write into the indexed checkout by default (outputs go under the cache dir; write_report / report_path / output_path added).

v0.9.1

Upstream ports: extractor memory safety, isolating extraction supervisor, Go/Python fixes, CALL_REFERENCE/USAGE split, 7 new grammars (33 languages), route extraction fixes, Kubernetes manifests, opt-in lsp_local resolver tier, team-shared graph artifacts.

v0.9.0: test: write SCIP fixture with 0600 permissions (gosec G306)

First public release.