v0.70.0 - Doctor hardening proof path

Highlights

• Added Claude Code settings, agentic workflow, and GitHub Actions hardening checks to contextforge doctor.
• Expanded proof-pack and scorecard evidence commands so Codex/Claude handoffs can rerun claude-audit, workflow-audit, and actions-audit directly.
• Refreshed the README first proof path around doctor + scorecard before deeper audit and surface artifacts.
• Bumped the public GitHub Action reference and package metadata to v0.70.0.

Validation

• PR #165 checks passed: CI and ContextForge Audit.
• Main checks passed after merge: CI and ContextForge Audit.
• Local validation: pnpm typecheck, pnpm test, pnpm build, doctor, scorecard, proof-pack, Claude audit, workflow audit, actions audit, security benchmark, audit, publish-readiness, and npm pack dry-run.

Research anchors

• GitHub Actions script injection guidance: https://docs.github.com/en/actions/concepts/security/script-injections
• GitHub Security Lab untrusted input guidance: https://securitylab.github.com/resources/github-actions-untrusted-input/
• GitHub Copilot customization docs: https://docs.github.com/en/copilot/concepts/prompting/response-customization
• Claude Code settings docs: https://docs.anthropic.com/en/docs/claude-code/settings