v0.6.0

Agent-hooks py launcher fallback and INT-3 verb list

MINOR: the agent-hooks emitter output changes, so an adopter's next chock sync /
chock plugin build rewrites .github/hooks/*.json. No credited enforcement surface
changes — the guard runs the same, just with one more way to find an interpreter.

Changed

• Agent-hooks Bash resolver adds the py launcher fallback. The Bash branch resolved
  command -v python3 || command -v python; the PowerShell branch already tried py. On a
  Windows checkout where only the py launcher is on PATH, the Bash hook exited
  "no python interpreter found" and the guard failed open. It now also tries py,
  matching the PowerShell branch, so the two agree about where enforcement holds. (#71)
• INT-3 recognises pin as a verb. Policy ids like pin-github-actions no longer draw
  a spurious "does not start with a verb" warning. (#71)
• Docs: dropped a stale hardcoded published-version snapshot from the compatibility
  page; the GitHub Action example now pins v0.6.0. (#72)

Release verification

The full pre-tag routine ran at zero failures on the tagged lineage: 844 tests green,
83% statement coverage, docs-accuracy and emitter-golden checks pass, catalog truth-check
251/251 eval cases (block and allow), and a byte-identical rebuild of the published
distribution trees. Post-tag verification (PyPI publish attestation, cold install, and
distribution republish from this tag) runs next and the distribution repos will republish
against v0.6.0.