v2.0.0

v2.0.0 — Node 20 dropped; observer, reports and recorder hardened

Breaking: engines.node >=20.0.0 -> >=22.0.0. Node 20 reached end-of-life on
2026-04-30, and better-sqlite3 stopped shipping a prebuilt binary for its ABI
after 12.9.0.

37 commits since v1.4.4, 23 of them fixes. The observer dashboard did not work
at all; two of its API routes answered unauthenticated with session events;
both reports and the dashboard executed audit data; input redaction missed
iframes and shadow roots and permanently corrupted the fields it did reach;
internal identifiers were compiling into dist and shipping.