pkgwhy 1.0.0

pkgwhy 1.0.0 release. Python package intelligence and supply-chain security decision-support CLI for developers and AI agents. Includes offline package inspection, vulnerability/provenance signals, static rule evidence, agent-readable JSON, local private-tool registry/runner support, and conservative policy decisions. Dynamic analysis remains experimental and out of scope for 1.0 production guarantees.