osintkit 0.5.0

Breaches that read like incidents, plus password checks.

Breach names are joined against the keyless HIBP and XposedOrNot catalogues for date, exposed fields, domain, and record count, so rows say "LinkedIn, 2021-06, emails and password hashes" rather than a bare word. osintkit password checks Pwned Passwords by SHA-1 prefix — hundreds of millions of leaked passwords, no key, no plaintext leaving the machine.

Email lookups now also inspect their own domain's DNS, mail posture, and WHOIS, marked as derived.

Reasoning models returned empty replies on oversized prompts; truncation is now detected and retried, the prompt is capped at 15 rows, and a failed synthesis falls back to a local report instead of nothing.