v1.2.0

What's Changed

Added

• SECURITY.md with vulnerability reporting policy
• Dependabot for automated dependency updates (Go modules + GitHub Actions)
• CodeQL static analysis workflow (weekly + on push)
• CHANGELOG.md following Keep a Changelog format

Fixed

• Removed useless modTimes initialization in watchDir (CodeQL go/useless-assignment-to-local)

Changed

• Upgraded actions/checkout from v5 to v6 (via Dependabot)
• Upgraded github/codeql-action from v3 to v4 (via Dependabot)
• Enhanced glama.json with license, repository, author, tools, resources, and prompts metadata

Full Changelog: v1.1.0...v1.2.0