RunReplay v0.2.0 — Resolve workflow sources and executed Action SHAs

Resolve manifest\n\nRunReplay can now resolve a GitHub Actions job into a versioned manifest:\n\n\

unreplay resolve --json > manifest.json\n\n### What it proves\n\n- Fetches the workflow source at the exact commit that ran.\n- Extracts supported Action declarations from job steps.\n- Uses the GitHub Runner log as the primary proof of an executed Action SHA.\n- Distinguishes immutable full-SHA declarations from mutable tags and branches.\n- Labels a GitHub API ref lookup as \github-api-current-ref, never historical execution evidence.\n\n### Honest limits\n\nLocal Actions, Docker Actions, dynamic expressions, and reusable workflows are reported as unresolved. This release does not claim VM replay, matrix expansion, or nested Action traversal.\n\nCI passes on Node 20, 22, and 24.