Secure-Vibe v1.1.0 - repositioning release

Repositioned from "secure-by-generation guarantee" to an honest fast lint + engine orchestrator + commit gate for AI coding agents.

What's new

Lexical stripping (core/strip.py): python tokenize + js lexer - comments/docstrings/strings never trigger rules (0% false positives on SecurityEval prompts)
SAST orchestrator (core/sast.py + cli.py sast): builtin engine + semgrep + pip-audit/govulncheck/npm audit in one pass; reports which engines ran and which were skipped, and why
Commit gate: hooks/pre-commit + .pre-commit-config.yaml + cli.py precommit --install-hook; validates staged files before every commit, skips cleanly when no usable interpreter
CI gate: GitHub Actions sast job (semgrep auto-installed in CI)
Post-repair regression verification (core/regression.py): broken fixes auto-reverted, pytest/npm/go/cargo/make detected per ecosystem
Human review tickets: full markdown (context + alternatives + round history) when the repair loop fails to converge
56-sample positive/negative self-test suite (core/selftest_suite.py)
Startup self-check: machine-specific fix commands instead of bare tracebacks; interpreter cache in config.yaml
Line/file-level suppression: # secure-vibe: ignore / # secure-vibe: ignore-file

Full official dataset.jsonl (121 CWE-annotated insecure samples + 121 benign prompts):

Honest ceiling of a fast single-pass linter; dataflow-depth findings are delegated to the sast orchestrator. See docs/evaluation.md.