dsh-refine v1.0.2

Added

• Community health files: CONTRIBUTING.md (dev setup, commit style, release
  process), SECURITY.md (private vulnerability reporting policy), bug/feature
  issue templates, PR template, CODEOWNERS, and .editorconfig.
• Bilingual docs: English README.md (primary) plus README.zh-CN.md,
  cross-linked; both shipped in the npm tarball.
• ESLint 10 flat config (eslint.config.js) with lint / lint:fix scripts;
  prepublishOnly now lints before testing. Dev-only tooling — the package
  still ships zero runtime dependencies.

Changed

• npm search metadata: description now leads with "DeepSeek Harness (dsh)
  plugin" and keywords align with the ecosystem (dsh-plugin, plugin,
  cordis, cordis-plugin, refinement, …); repository description,
  homepage, and topics configured via gh api.
• CI: dedicated lint job; all workflows install with npm ci (lockfile is
  now committed for reproducible installs).
• Publish workflow additionally creates the GitHub Release with the changelog
  notes for the tagged version.

Fixed

• Minor lint findings with no behavior change: unused fileURLToPath import
  in lib/compat.js, a dead engineActive initialization, and an unused
  parameter name in RefineUxRemote.data.