v0.2.2

Supply-chain security release: no changes to the vibesequence package itself.

• Release artifacts (wheel + sdist) are scanned with ClamAV and ship with signed build provenance. (VirusTotal scanning starts with the next release.) Verify a download with:
  gh attestation verify <file> --repo monkeymars/vibesequence
• CI hardening: OpenSSF Scorecard, CodeQL, GuardDog dependency scanning, Atheris fuzzing, hash-pinned CI dependencies.
• Live demo of the viewer on the landing page.

What's Changed

• Landing page: SEO and GEO by @monkeymars in #16
• Landing page: live demo of the viewer at /demo/ by @monkeymars in #15
• Add security pipeline: Scorecard, CodeQL, GuardDog, release scanning by @monkeymars in #17
• Bump actions/deploy-pages from 4.0.5 to 5.0.1 by @dependabot[bot] in #21
• Bump actions/configure-pages from 5.0.0 to 6.0.0 by @dependabot[bot] in #20
• Raise OpenSSF Scorecard: hash-pinned pip, fuzzing, signed releases by @monkeymars in #22
• Bump actions/checkout from 4.4.0 to 7.0.1 by @dependabot[bot] in #18
• Bump actions/setup-python from 3.1.4 to 7.1.0 by @dependabot[bot] in #19
• Bump actions/upload-pages-artifact from 3.0.1 to 5.0.0 by @dependabot[bot] in #23
• Bump version to 0.2.2 by @monkeymars in #24

New Contributors

• @dependabot[bot] made their first contribution in #21

Full Changelog: v0.2.1...v0.2.2