v0.1.0

Initial public release.

• who-uses: read-only scanning tool (projects + optional system snapshot)
• --json output (v1): projects-only, sanitized, deterministic; line/column only
• CI: ShellCheck + pre-commit + custom no-leaks hook