docs: record 0.1.0 publication evidence

[cloudsbeyond]

Summary

• record the public npm registry metadata, owner, tarball checksum, and release commit/tag
• promote publication and package-integrity gates to their verified post-publication states
• capture fresh empty-cache registry install evidence for CLI, API exports, and bin mapping

Validation

• pnpm vitest run test/publication-identity.test.ts (24 passed)
• pnpm release:check (15 files / 117 tests, typecheck, build, package dry-run)
• project-traceability.yaml parsed successfully