0.2.0

Three new standards + CI uplift to dunn.dev/pipeline 2.3.0:

- container-publishing: Containerfile FROM uses ci-runtime-go|node
  catalog base; .gitlab-ci.yml uses container-image@X.Y.Z catalog
  include.
- package-publishing: any publish-shaped CI also includes slsa-attest
  + release-create.
- image-cleanup: container_expiration_policy.enabled at project level.

Reference's own CI now publishes @dunn.dev/reference via catalog
node-publish + node-sbom + slsa-attest + release-create. Tarball
cosign sign-blob; SBOM + SLSA v1.0 attest attach to the GitLab
Release.