v0.2.2

Added

• examples/demo/: a script that stages a failure, two SELinux denials
  and a memory hog on a test VM and shows what Sentry-v2 makes of them, in
  dry-run, then cleans up. Two bundles captured from it on a Rocky 10 VM
  sit next to it, with a recording in assets/demo.gif.
• An integration test that starts an unrelated denied service in the same
  window as a failing one and checks its denial stays out of the bundle.

Changed

• The README leads with the demo recording and a real incident, then
  adds a compatibility table, a safety table and a section on false
  positives and failure modes.

Fixed

• A bundle for a failed unit outside system.slice showed pressure for
  system.slice once the unit had lost its cgroup. It now reads the unit's
  own slice from systemd, so a service in sentry-test.slice gets
  sentry.slice/sentry-test.slice and its parents.