v0.4.1 — Verify Command, Git Commit Pinning, Security Badges & GitHub Action

Changes in v0.4.1

• SkillForge Badge: Added \skillforge badge\ command to generate verified shields.io badges for skill repositories.
• GitHub Action: Added official composite action (\�ction.yml) for automated security auditing and token budgeting on Pull Requests.
• Verify Command: Added \skillforge verify\ command to check installed skills against \skillforge.lock\ for file drift, tampering, or missing packages.
• Commit Pinning: Added reproducible Git commit SHA-40 pinning in \skillforge.lock\ with support for @\ in remote specs.
• Security Hardening: Blocked path traversal in
  emove\ and git option injection in \GitRemoteRegistry.
• Non-Destructive Copilot: Preserved hand-written instructions in .github/copilot-instructions.md\ using marker blocks.
• Playbook & Quickstart: Added \docs/LAUNCH_PLAYBOOK.md\ and zero-install quickstart via \uvx agent-skillforge.