rtb v0.1.0 — first release

Eight shipped crates, 154+ acceptance criteria, full Zensical
documentation pipeline, and a smoke-tested reference example.

Shipped crates:
  rtb-error          typed Error + miette hook pipeline
  rtb-core           App context, ToolMetadata, Features, Command
  rtb-config         typed layered config over figment + arc_swap
  rtb-assets         overlay FS over rust-embed + dirs + memory
  rtb-cli            Application::builder, clap wiring, built-ins
  rtb-credentials    CredentialStore + Resolver + secrecy end-to-end
  rtb-telemetry      opt-in events + pluggable sinks + salted machine ID
  rtb-test-support   sealed-trait TestAppBuilder for downstream tests

Security + correctness foundation:
  * DirectorySource rejects path traversal lexically (safe_join).
  * Footer closures run inside catch_unwind + re-entry guard.
  * FileSink serialises concurrent JSONL writes.
  * SecretString end-to-end; CredentialError Clone via Arc<io::Error>.
  * LiteralRefusedInCi gates literal secrets under CI=true.
  * `#![forbid(unsafe_code)]` on every production lib.rs.

Workspace infrastructure:
  * cucumber-rs BDD harness in `cargo test`, per-crate.
  * cargo-llvm-cov ≥70% line coverage gate.
  * `just ci` runs fmt-check + clippy + docs (-D warnings) + tests
    + cargo-deny + coverage on default features.
  * Linux keyring defaults to pure-Rust keyutils; opt-in dbus via
    the `credentials-linux-persistent` feature.

Documentation:
  * Framework spec, per-crate v0.1 specs (all IMPLEMENTED),
    engineering standards, concept pages (app-context,
    configuration, error-diagnostics), per-crate component pages.
  * Zensical microsite config + GitHub Pages deploy workflow.

Deferred (see framework spec §16 Roadmap):
  * v0.2 — rtb-update, rtb-docs, rtb-redact, rtb-config hot reload.
  * v0.3 — rtb-ai, rtb-mcp, structured output.
  * v0.4 — rtb-tui, telemetry/credentials/config CLI subcommands.
  * v0.5 — rtb-vcs (octocrab + gitlab + gix).
  * v0.6 — rtb-cli-bin scaffolder.
  * v1.0 — API freeze.

See CHANGELOG.md for the full per-subsystem summary.