Release v0.8.5

What's Changed

• docs: full README + docs-site overhaul for v0.8.1 by @SpasticPalate in #56
• fix: replace all scoped package references with vibe-forge (CLEAN-018) by @SpasticPalate in #57
• chore: close 59 stale backlog tasks by @SpasticPalate in #58
• chore: add .gitattributes + cleanup by @SpasticPalate in #59
• refactor: clear pending backlog - src/ reorg, templates, shell hardening by @SpasticPalate in #60
• fix: SEC-005 reject relative paths in FORGE_ROOT validation by @SpasticPalate in #61
• fix: restore empty task directories by @SpasticPalate in #62
• fix: guard unbound variables in forge-setup.sh by @SpasticPalate in #63
• fix: silence sqlite WAL PRAGMA output in db_init by @SpasticPalate in #64
• refactor: drop msedge-tts, use Web Speech API for dashboard voice by @SpasticPalate in #65
• security: env allowlist + spawnSync arg arrays for cli child processes by @SpasticPalate in #67
• fix: use OIDC trusted publishing instead of npm automation token by @SpasticPalate in #68
• fix: upgrade npm on publish runner for OIDC trusted publishing by @SpasticPalate in #69
• fix: revert to token-based npm publish with granular access token by @SpasticPalate in #70

Full Changelog: v0.8.1...v0.8.5