v0.9.0

What's Changed

• docs(readme): drop waitlist CTA (site no longer has a waitlist) by @tiagosilva07 in #61
• docs: sync README waitlist-CTA fix to main by @tiagosilva07 in #62
• feat: update detection + one-step MCP install by @tiagosilva07 in #63
• fix(P0): fail closed on undetermined verdict (ERROR) by @tiagosilva07 in #64
• feat(P1): retries/backoff + MCP panic recovery by @tiagosilva07 in #65
• feat(P1): security hardening (cosign upgrade, redirect scheme, version validation, zip-bomb cap) by @tiagosilva07 in #66
• chore(P2): CI gates + docs hardening by @tiagosilva07 in #67
• feat: deterministic agentsec detection hardening (Tier 1-3) by @tiagosilva07 in #68
• docs(roadmap): expand v0.9.0 for the upcoming release by @tiagosilva07 in #69
• release: v0.9.0 by @tiagosilva07 in #70

Full Changelog: v0.8.2...v0.9.0