v0.5.1

What's Changed

• Add a reproducible Before → After first-run demo by @kohli217 in #40
• Add a direct try-it and usage-report adoption path by @kohli217 in #42
• Improve newcomer and false-positive reporting paths by @kohli217 in #46
• Add OpenSSF Scorecard security health reporting by @kohli217 in #48
• Clarify private vulnerability reporting by @kohli217 in #49
• Pin GitHub Actions to exact commits by @kohli217 in #50
• Add dependency review to pull requests by @kohli217 in #51
• Scope workflow token permissions to jobs by @kohli217 in #52
• Add provenance attestations to releases by @kohli217 in #53
• Prepare v0.5.1 release by @kohli217 in #54
• Publish to PyPI after successful releases by @kohli217 in #55

Full Changelog: v0.5.0...v0.5.1