v0.1.0

dozor 0.1.0 — first release, npm only

Compiles OSV advisories and a registry inventory into a NORA blocklist.
Deterministic, no daemon, no database. Verified against the published NORA
image on every push: 197k rules load, a blocked tarball returns 403 carrying
the advisory id.