fix: production hardening (tok 0.1.0 CHANGELOG, trace panic, pin gosec/govulncheck, gosec enforcing) (#55)

Co-authored-by: Race Tester <race@test.com>

Author: Patel230

CHANGELOG.md

@@ -14,13 +14,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 > hooks, agent installers, or a TUI describe prototype work that did not ship in
 > the library; see the historical note under `[0.29.0]`.
 
-## [Unreleased]
+## [0.1.0](https://github.com/GrayCodeAI/tok/compare/v1.1.0...0.1.0) (2026-06-08)
 
 ### Changed
 - **Version re-baselined to `0.1.0`** across `.release-please-manifest.json`,
   `CITATION.cff`, and `scripts/install.sh`, aligning tok with the rest of the
   hawk-eco ecosystem (`hawk`, `eyrie`, `yaad`, `sight`, `inspect`).
 
+## [Unreleased]
+
+See [0.1.0] for the latest changes.
+
 ### Added
 - **Custom filter DSL** — define regex find/replace rules in a TOML file
   (e.g. `~/.tok/filters.toml`) and apply them via `tok.LoadFilterRules` +