v0.2.0

Multi-arch images: the release workflow now builds linux/amd64 + linux/arm64 and the Dockerfile is arch-aware (gitleaks per-arch tarballs, semgrep aarch64 wheels; jadx/apktool are JVM jars). Apple Silicon / ARM hosts pull the native arm64 image. One amd64-only gap stays: edit & recompile needs Google's Android build-tools (zipalign/apksigner) + apktool's aapt2, which are Linux x86_64-only — the arm64 image skips them and the rebuild pipeline fails loudly with a clear message.