v0.2.1 — hardened CI (lint+test+audit+lockfile-lint+build+scan+deploy), clean Trivy scan, npm CVEs fixed
