Oh My Herdr v0.2.0

Complete-MVP preview with reproducible selected-plugin state and one guided
setup entry point.

Added

• Side-effect-free omhr plugin list reads bounded Herdr 0.8.2 registry metadata
  without invoking Herdr's plugin command or executing plugin code.
• Explicitly selected installed GitHub plugins resolve into deterministic lock
  metadata containing immutable commits, reviewed manifest digests, build argv,
  and executable-surface counts.
• Plugin-bearing apply and verification require an exact lock, managed checkout,
  matching Git HEAD, clean tracked source, tracked manifest, and matching review
  digest before the existing Codex transaction can proceed.
• omhr export emits deterministic portable TOML or JSON bundles consumed by
  plan, apply, and verify on compatible machines with the exact selected
  plugins already installed.
• omhr setup composes diagnosis, deterministic planning, exact review,
  approval-bound apply, bounded verification, and idempotent reapply without
  hiding lower-level failures.

Release integrity

• The packaged binary is tested for its complete command surface, deterministic
  profile and bundle planning, guided preview, exact approval, verification,
  no-change reapply, byte-exact rollback, and unrelated-file preservation.
• Release notes are extracted from only this version section; the archive remains
  checksummed and receives GitHub build-provenance attestation.

Security and compatibility

• No plugin is installed, updated, built, started, invoked, removed, or endorsed.
  Selected-plugin verification proves source integrity only.
• The supported runtime remains Herdr 0.8.2 on macOS Apple silicon. Linux remains
  CI-only, Windows remains unsupported, and Homebrew distribution remains a
  separate gate.