v0.4.2

Changelog

• 8c4983d Add 2-week cooldown to dependabot version upgrade PRs
• 73b4b48 Merge pull request #14 from lpmi-13/copilot/update-github-actions-to-sha
• 7e2d87e Pin GitHub Actions to commit SHA hashes with version comments
• 7f7d216 Update README.md
• 1e48fd3 ci: finish the SHA-pinning sweep — pin upload-sarif in the published action, dependabot-friendly version comments
• 5c5d971 docs(changelog): cut 0.4.2 — pgbot init, action at repo root + v1 tag, SHA-pinned actions (#14)
• 013ad01 docs(readme): centered header with badges + nav, beta-status note, Why-pgbot table, comparison fold, requirements and uninstall sections
• 305212e docs(readme): pgbot.dev logo atop the header
• 6b28844 fix dependabot cooldown syntax: default-days integer, not a duration string