BeforeDone v1.0.1

BeforeDone v1.0.1

This is a small correctness and release-quality update. It keeps BeforeDone's
scope unchanged: prevent a normal coding agent from claiming completion with
missing or stale evidence; do not attempt to defend against a malicious process
with the same operating-system access.

Correctness fixes

• Fail closed when a declared relevant-file scope touches a Git submodule or
  gitlink whose complete working state cannot be fingerprinted safely.
• Include unresolved Git index stages in fingerprint decisions.
• Disable repository Git hooks only while BeforeDone creates its internal
  replay worktree; explicitly configured verifiers keep their normal behavior.
• Reject a signed Receipt whose embedded check ID does not match the requested
  latest-<check>.json alias, preventing one check's PASS from satisfying
  another required check.
• Lock receipt/log deletion and replacement behavior with regression tests.

Usability and distribution

• Add practical guidance and copyable Codex prompts for choosing credible
  checks and reporting uncovered acceptance criteria as unverified.
• Clarify that a Receipt is bound to the declared relevant-file scope; it does
  not prove that the verifier covers every natural-language requirement.
• Harden verification of the Skills-only OpenAI Directory bundle.
• Include Go runtime and linked-dependency notices in every release archive and
  expose the same list through beforedone licenses.

The release contains six platform archives, six SPDX SBOMs, checksums,
Homebrew/Scoop manifests, and the Skills-only Directory ZIP plus its SHA-256
sidecar. This manual release does not claim GitHub OIDC build provenance.

Native runtime testing of macOS, Linux, and Windows arm64 archives remains an
explicit environment exception; all six artifacts were cross-built and
inspected, and Windows amd64 was executed locally.