cipp-v0.1.2

Security

• Go toolchain bumped to go1.26.6, which fixes GO-2026-6218 (quadratic
  complexity in net/url, reachable from cliutil.ProbeReachable). The
  previously released binary was built with go1.26.5 and carried the advisory.
  CI could not catch this: the workflows request go-version: "1.26", which
  resolves to the latest patched Go, so the security gate scanned a patched
  toolchain while the build honoured the pinned one. See issue #210.