Bump to v0.3.2

First release using npm Trusted Publishers — emits provenance
attestations for all six @nutz/composit packages.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: 7schmiede

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "composit"
-version = "0.3.1"
+version = "0.3.2"
 edition = "2021"
 description = "Governance-as-Code for AI-generated infrastructure — scan declarations, diff against a Compositfile, surface drift."
 license = "MIT"