v1.3.3

Changelog

• 9a694af: feat(report): disclose a degraded environment (Chrome/scanner gaps) (#37) (@fabriziosalmi)
• 9ce9f75: fix(AG-NET-01): make CSP evidence say "permits", not imply asset relocation (#33) (@fabriziosalmi)
• 70d349e: fix(AG-SUP): empty/config-only scan input is N/A, not a vacuous PASS (#35) (@fabriziosalmi)
• 6cfdd40: fix(chrome): discover the browser on macOS/Windows, not just Linux PATH (#30) (@fabriziosalmi)
• 9a0e81e: fix(engine): unreachable surface is UNSCANNABLE, not a low score (exit 3) (#31) (@fabriziosalmi)
• 08c7d47: fix(report): split the fix queue — FAIL only vs "could not assess" (#34) (@fabriziosalmi)
• 5ce4bff: fix(score): label the score level-relative; expose scored-rule count (#36) (@fabriziosalmi)
• 2886c0b: fix(supply): sanitize scanner diagnostics, don't leak --help chatter as evidence (#32) (@fabriziosalmi)
• b1eb523: release: v1.3.3 — dogfood fixes (reachability gate, degraded-env disclosure, honest fix queue) (#38) (@fabriziosalmi)