codexwatch 1.0.2

A small fix for the dashboard, mostly for Windows, and a tighter release build.

• The dashboard now serves its own files with fixed content types instead of the system's table. On Windows that table can label .js as plain text, and the browser then refuses to run the dashboard's script.
• The wheel and sdist are built with build and setuptools pinned by hash, so the build no longer fetches whatever setuptools is newest. The Docker image pins its base image by digest and installs nothing with pip.
• SECURITY.md links the private report form.

pipx upgrade codexwatch-cli      # or: pipx install codexwatch-cli

No changes to how anything is counted or shown. CHANGELOG.md