Prepare v0.1.0-rc.2 npm release

[orange90]

Summary

• prepare v0.1.0-rc.2 after rc.1 stopped before npm publication
• make core coverage inputs explicit across Node 22 and Node 24
• measure production source only and use the observed 75% branch gate
• document the short-lived bootstrap token permissions and revocation

Verification

• core coverage on Node 24.18.0: 92.92% lines, 75.07% branches
• pnpm test:coverage
• pnpm test:pack (freemodelfinder-0.1.0-rc.2.tgz)
• pnpm verify:release
• node scripts/verify-tag.mjs v0.1.0-rc.2