ci-tools 0.1.0 First tagged release so consumers can pin components and helper-script clones to an immutable ref (semver tag, catalog-compatible). The security-scan/changelog templates clone helpers with git clone --branch, which accepts tags but not commit SHAs — pin ci_tools_ref to this tag.