Pandion v0.2.0

Changelog

• 0d059f5 Relicense to Business Source License 1.1 + commercial licensing + CLA
• 6b4794e feat(config): apply cluster.yaml node settings — polyglot toolchain, size, image, region (P0-2) (#20)
• 0f4ee30 feat(security): on-node idle dead-man's-switch (P2b, A5) (#23)
• 9f2449f feat(security): run workloads as unprivileged envcore-run user (P1, S-C) (#21)
• ae2ecbd feat(workspace): sync local project to nodes + remote build (P0-1) (#19)
• b94f701 feat: envcore reap — client-side orphan reaper for billing-leak prevention (P2/C4) (#22)
• 38b5bd0 feat: capability add-back (P1b) (#25)
• 347067d feat: hardened Docker engine (--engine=docker) (#24)
• a7ab083 rename: EnvCore -> Pandion (#26)