chore: prepare 0.1.0 npm release

[cloudsbeyond]

Summary

• freeze the 0.1.0 changelog and public npm destination
• record real Provider smoke, fail-closed, and secret non-disclosure evidence
• add release metadata contract coverage

Validation

• real language, embedding, and vision smoke passed in an isolated runtime home
• unconfigured model capabilities returned missing_resource and non-zero exit
• Node 20: 15 files / 117 tests, typecheck, build, 21-file pack dry-run
• Node 22: 15 files / 117 tests, typecheck, build, 21-file pack dry-run
• pnpm security:audit: no known production vulnerabilities

Publication will occur only after this release commit is merged and npm authentication succeeds.