chore(release): v0.1.0

[albedosehen]

First numbered release. Daemon is end-to-end: trait surface, config schema, Namecheap CA + registrar, DSM + filesystem install, SQLite/SurrealDB audit log, renewer pipeline, scheduler loop ticking on check_interval_seconds and triggering renewals when a cert is within renew_threshold_days of expiry.

What's not in v0.1.0 (slipped to v0.2):

• rota CLI (status / renew --cert <id> / log <id>) over a UNIX socket.
• Dashboard cert table + per-cert detail + audit timeline.

The README's roadmap is updated to reflect the slip.

What landed since the scaffold

• feat(backends): namecheap CA + registrar #1 Namecheap CA + registrar
• feat(backends): filesystem + DSM install backends #3 DSM + filesystem install backends
• chore: scrub sensitive data and rewrite docs for public launch #4 sensitive-data scrub + README rewrite for the public launch
• feat(daemon): SQLite audit store + renewal pipeline driver #5 SQLite audit store + renewal pipeline driver
• feat(audit): pluggable audit backend with SurrealDB option #6 pluggable audit backend with SurrealDB option
• chore(security): redact secrets, mask creds, tighten audit perms #7 security hardening (secret redaction, manual Debug on creds, audit DB perms)
• feat(install): cert read-back + notAfter parser #8 cert read-back + notAfter parser
• feat(daemon): scheduler loop driving the renewer #9 scheduler loop driving the renewer

Diff in this PR

• Cargo.toml workspace.version: 0.0.0 → 0.1.0
• README.md Status + Roadmap updated

Test plan

• cargo build clean on all three crates at v0.1.0
• CI on this branch will rerun cargo fmt --check + cargo clippy -D warnings + cargo test --workspace
• After merge: git tag v0.1.0 && git push origin v0.1.0, then gh release create v0.1.0