kit v0.3.1

CI hardening and supply chain fix.

- Pipeline v2.1.0: nomograph container registry, release install instructions
- Explicit audit_allow_failure: false
- Supply chain gap fixes from main (unreleased since v0.3.0)
- Updated yanked fastrand