v1.0.0

First stable release.

- 29 resource types, over SSH, WinRM or the local machine. Nothing is
  installed on the target.
- Profiles in HCL: typed variables, validation, waivers, dependencies.
- Reports in terminal, json, junit, html, gha, gitlab and wazuh form, each
  with a SHA-256 and an optional Ed25519 signature.
- deb and rpm packages, archives for Linux, macOS and Windows, an SBOM per
  archive and a cosign-signed checksums file.
- AGPL-3.0. Semantic versioning from here; see The Promise in the README.