advisory-radar 0.1.0

advisory-radar 0.1.0 — the first public release

The security-advisory notifier extracted from the estate's internal worker, rebuilt
as a modular monolith: one process runs the poller, the pipeline and a small web UI.

Sources: RSS/Atom, FreshRSS (GReader), changedetection.io API polling, Adobe Commerce
APSB bulletins, generic inbound webhook.
Enrichment: CVE.org, NVD, FIRST EPSS, CISA KEV, OSV, Debian security tracker,
php.net ChangeLog, nodejs.org posts.
Verdicts: KEV, SSVC active, remote-unauthenticated CVSS >= 9.0, EPSS threshold;
suppression only on complete data, fail-closed on every source and lookup fault,
daily re-evaluation with at most one escalation per level.
Notifiers: Apprise, Discord webhook, Matrix webhook, ntfy, Gotify, SMTP, generic webhook.
Deployment: rootless multi-stage image, docker-compose, Podman quadlet, Kubernetes notes.
Validation: 178 tests; ruff, pinned gitleaks with a verified digest, estate-identifier
guard, workflow-YAML check and a container start/healthz smoke test in CI.