v0.3

Changed

• zstd-platform is now an ordinary (empty) jar instead of a pom aggregator:
  depend on it like any other artifact — drop the <type>pom</type> you needed
  before. It still transitively pulls the bindings plus all six native libraries.

Security

• Native loading is bundled-only. Removed the -Dzstd.lib.path override —
  loading a caller-supplied native library is arbitrary native code execution in
  the JVM, so the loader now trusts only the artifact bundled on the classpath.
  The bundled library is extracted into a private, owner-only temp directory
  (closing a swap/symlink window in the shared temp root). To run a self-built
  libzstd, rebuild it into the native resource jar (see docs/how-to.md).

Fixed

• ZstdSkippableContent now compares by content: equals / hashCode /
  toString consider the payload bytes instead of array identity.