Kingfisher v2.2.0

[v2.2.0]

• Added repository coverage manifests and incremental --audit-log JSONL events, including
  discovery, fetch, scan outcome, Git scope, and per-repository scan statistics.
• Added read-only Google API-key blast-radius probes for Identity Toolkit, Generative Language,
  Translation, and YouTube services.
• Updated Cargo dependencies, including AWS SDK, Git, TLS, and runtime libraries.
• Explicitly enabled HTTP/2 for outbound validation requests to improve connection reuse and multiplexing.
• Refreshed the pinned Betterleaks catalog to commit
  95237cf,
  adding the Voyage AI API-key detector. Built-in coverage is now 485 rules (459 Betterleaks and
  26 Veles), with 246 rules supporting validation. The OSV-SCALIBR Veles audit found no new secret
  detectors since the existing pinned revision.