TestSpot CLI v0.1.1

Security fix: reject symlinked environment.properties so outside files cannot enter launch metadata. All five native build/test jobs passed: Linux x64/ARM64, macOS Intel/ARM64, Windows x64. All release assets verified against SHA256SUMS; the public macOS ARM64 download passed both smoke tests. Publication recovered manually after GitHub upload errors. The v0.1.0 release, tag and build artifacts have been withdrawn. Replace installed v0.1.0 copies.