v1.4.0

What's Changed

• Docs/prune and point to site by @Animesh-Sri-bugb in #65
• Probe primitives, annotation-free coverage, and first real-target validation by @Shahid-BugB in #66
• feat(pentest): native gRPC probe capability — cxg.grpc by @Shahid-BugB in #67
• feat(scan): CLI probe contract — cli:// target, structured input, oracles, instrumentation preflight by @Animesh-Sri-bugb in #68
• fix(validator): four CLI-template validator fixes, plus the CLI Security Baseline conformance suite by @Animesh-Sri-bugb in #69
• fix(engine): read the symbol table for instrumentation, not the file's bytes by @Animesh-Sri-bugb in #70
• feat(build): cxg build --instrument, the Rust overflow class, and manifest provenance by @Animesh-Sri-bugb in #71
• docs: update stale Discord invite link by @Animesh-Sri-bugb in #72
• fix(pentest): attach @comment/@flows by full path and withhold pre-fix templates by @Shahid-BugB in #73
• fix(pentest): read the @g. and wrapped-description inline annotation forms by @Shahid-BugB in #74
• refactor: convert inline annotations off Giggs' @g. prefix to GuardLink verbs by @Shahid-BugB in #75
• fix(pentest): refuse the run when --scope-file cannot be read instead of scanning on defaults by @Shahid-BugB in #76
• feat(pentest): read the annotation forms guardlink teaches by @Shahid-BugB in #77
• fix(pentest): derive inline annotation acceptance from guardlink's grammar table by @Shahid-BugB in #79
• fix(pentest): require a verb to open the comment body to be read as an annotation by @Shahid-BugB in #80
• feat(pentest): carry the tested exposure's identity on every finding by @Shahid-BugB in #78
• chore(release): prepare 1.4.0 by @Animesh-Sri-bugb in #82

Full Changelog: v1.3.0...v1.4.0