v0.0.26

Fixed

• Release signatures are now discoverable. The cosign bundle shipped as
  checksums.txt.bundle, an extension no tooling recognises — the OpenSSF
  Scorecard scored Signed-Releases 0 despite the release being signed. It is
  now checksums.txt.sigstore.json, the canonical Sigstore bundle name.
• Workflow tokens are read-only by default. release.yml requested
  contents, id-token, and attestations write at the workflow level,
  so every step ran with them. Permissions are now read-all at the top and
  widened only on the job that publishes.

Added

• CodeQL analysis runs on push, pull request, and weekly, with the
  security-and-quality query suite.