v0.10.0

Added

• Framework compliance mapping module (CIS Azure Benchmark)
• CLI refactored into cli/ package with one module per command

Changed

• Recentered the README and published docs around the CLI-first workflow (discover, scan, audit, validate, snapshot, diff)
• Clarified the project scope around a single supported interface: the CLI
• Refreshed dependency constraints and lockfiles to address current security updates
• Hardened the composite GitHub Action by running without shell eval and installing from action source for deterministic behavior
• Tightened CLI contracts: explicit --tenant-id now bypasses local policy auto-detection, and framework mode enforces HTML-only output constraints
• Standardized user-facing naming around az-rbac-watch in reports and package metadata

Removed

• Removed the MCP server codepath and packaging extras to keep the project focused on the CLI and CI/CD workflow

Documentation

• Added published command pages for snapshot and diff