v1.0.1

Changelog

• 19f94a3 add screenshot in readme
• 8bc1590 fix: run the shell and Android checks against ZIP and URL targets
• bb382a8 build: bump golang.org/x/sys to v0.44.0 for GO-2026-5024
• 51e8757 fix: verify build provenance in the installer, not just the checksum
• c31c8e9 fix: fence the LLM prompt and refuse cleartext endpoints
• 1efb420 fix: drop -token so a secret never reaches argv
• 47e9420 fix: keep include.path and core.hooksPath inside the scanned tree
• 3d44fba fix: marshal finding severity as a name, not an integer
• f247150 fix: strip terminal escape sequences from report output