v0.1.1

ingot learns a registry

A version dependency now resolves out of Foundry, an index of TOML in a
git repository. A release records the commit to fetch and the tree it
must hash to, so resolving reaches the network for nothing but the index
and installing is checked against a hash rather than trusted to a host.

INGOT_REGISTRY names a registry, as a URL or as a directory; a directory
is used where it lies, which is what a private or offline registry is.
New verbs: update, search. `ingot add <name>` with no version records a
caret on the newest published one.

v0.1.0

W# 0.1.0

The first release.

A toolchain is a directory, not a file: `wsharp`, `ingot`, and the runtime
archive under `lib/` that a compiled program links against. `wsharp` finds that
archive beside itself, and `ingot` finds `wsharp` beside it, so an unpacked
tarball works with no configuration.

Built for x86_64-unknown-linux-gnu, aarch64-apple-darwin and
x86_64-apple-darwin. Each tarball has a .sha256 beside it.

Windows is not in this release. It compiles and links, but `fs.mkdir_all` does
not create the last component of a path there, so `ingot install` fails for any
package with a `src/`. The build fixes are in; the bug is written up in
CLAUDE.md.