Release v1.20.0

Changelog

• b063fc6 chore(deps): bump astro 7.0.6 -> 7.1.0 (GHSA-4g3v-8h47-v7g6) (#123)
• af46f98 chore(deps): bump go.klarlabs.de/mcp to v1.24.0
• 03b232e chore(release): publish the brew artefact to felixgeelhaar/homebrew-tap (#124)
• 7ed76a8 chore(release): publish the brew artefact to the klarlabs-studio tap (#125)
• 68ae225 chore(security): nox remediation (deps + actions) (#119)
• b14019c docs(research): codebase health assessment — what’s good, bad, and next (#129)
• be6b990 feat: finish remaining backlog (smoke, telemetry, blog, evals) (#133)
• b7ae0a7 feat: implement codebase health improvements (#130)
• e773ac8 fix(ci): run CI on docs-only PRs so required checks can report (#121)
• afefe10 fix(security): bump x/text to a patched version (#122)
• c985ed4 fix(security): remediate known CVEs in Go + JS deps (#120)
• a44f16e fix: accept in-root absolute paths, stamp version, warn on unmatched packages (#127)
• 615fa72 fix: see unmatched packages the profile cannot, and mark inherited minimums (#128)