v0.2.0

Performance
- RegexSearch: two-phase RE2 matching (cheap boolean-only filter before the
  slower capturing call) -- ~1.75-1.8x throughput at 100k/1M-entry scale.
- TokenSetSearch: per-entry name-token spans now cached in IndexPool instead
  of re-tokenized on every search (docs/adr/0012) -- ~1.75x throughput at
  1M-entry scale. matchPath/ignoreDiacritics searches unaffected.

CI
- Benchmark results render as markdown tables directly in the job summary,
  including a delta-vs-previous-run comparison (previous/current/percent
  change, flagged) so regressions are visible without manual digging.
- Dependency Scan workflow (weekly cron + manual dispatch) given its first
  run so its status badge is meaningful.

Fixed
- InotifyWatcher's intermittent test failures root-caused to dev-machine
  background load starving the watcher thread past test timeouts, not a
  product bug -- confirmed via isolated inotify probes and repeated clean
  runs under normal load.

Docs
- README states the actual platform-testing scope honestly: Fedora XFCE
  only, solo project, portability believed but unverified elsewhere.