Release v1.0.2

Release v1.0.2

• GitHub Spec Kit baseline and docs/SPEC-KIT.md
• SECURITY.md and SPEC-DRIVEN-DEVELOPMENT.md corrections
• Demo Makefile DOCKER_COMPOSE rename; symfony.lock cleanup

No breaking changes for bundle consumers.

Changelog

Added

• GitHub Spec Kit baseline: .specify/, Cursor Agent skills (.cursor/skills/speckit-*), and specs/001-baseline/ with full src/ code inventory.
• docs/SPEC-KIT.md: installation, structure, and maintainer usage manual.

Changed

• docs/SPEC-DRIVEN-DEVELOPMENT.md: three-layer model (Spec Kit + product behavior + REQ-* traceability); user stories aligned with tag-input domain.
• docs/SECURITY.md: threat model and release checklist corrected for Tagify/tag options (pattern, whitelist, max_tags) — removed stale OTP-bundle wording.
• Demo Makefiles (demo/symfony7, demo/symfony8): COMPOSE renamed to DOCKER_COMPOSE (Nowo standard).
• README: link to docs/SPEC-KIT.md in the canonical ## Documentation section.
• Composer lock files refreshed (bundle root and demos).

Fixed

• Demo symfony.lock (symfony7): removed stale nowo-tech/otp-input-bundle entry.

Full Changelog: v1.0.1...v1.0.2