pkgwhy 0.6.0a0 pre-alpha developer preview

Pre-alpha developer preview. Includes offline package inspection, agent-readable judgement, local registry, local publish/tool inspect/tool judge, local runner MVP, vulnerability/provenance foundation, static rule evidence, dynamic sandbox design skeleton, and agent policy hardening. Not production security advice and not full OS sandboxing.