chore(release): v0.1.2

[marcinobel]

Release v0.1.2 – governance, supply-chain hardening, and doc corrections.

See CHANGELOG.md [0.1.2] for the full list. Highlights:

• REUSE 3.3 / SPDX compliance + governance set (CLA, COPYRIGHT, TRADEMARKS, SUPPORT, CITATION, CODEOWNERS, Dependabot).
• Signed-tag + protected-environment OIDC publish pipeline; Actions pinned to commit SHAs.
• sc push documented as an unsupported public-API stub; Node.js badge; Support section.
• Dev-only undici bumped to clear a high-severity advisory (not in the published package).

No new CLI features or behavior changes. After merge: signed v0.1.2 tag + GitHub Release → gated OIDC npm publish.