🔖 Prepare v0.3.0 release

[Nick2bad4u]

Summary

• publish the backwards-compatible CLI, catalog, and gallery expansion as v0.3.0
• document language facets, ANSI/live/Glow previews, curated layouts, and security/maintainability fixes
• update the Quality workflow to the verified Harden-Runner v2.21.0 SHA already used by Pages and Release

SemVer

Recommendation: minor
Confidence: high
Range: v0.2.0..97dc873
Next version: 0.3.0

The release adds public CLI commands and options plus additive catalog language metadata without removing or renaming package exports, binaries, existing commands, engines, or supported inputs.

Validation

• npm run release:verify
• 44 tests across 6 files
• 97.82% statements, 91.41% branches, 100% functions, 99.19% lines
• npm audit --omit=dev --omit=peer: 0 vulnerabilities
• npm audit: 0 vulnerabilities
• actionlint, Gitleaks, Secretlint, lychee, jscpd, Publint, ATTW, and npm pack dry-run passed
• release verification left the intended worktree diff unchanged

Dependabot PR #2

This preserves the valid Harden-Runner update from #2. The grouped TypeScript 7 update and transitive dependency downgrades are intentionally excluded because that generated PR fails the repository Quality gate and conflicts with the current TypeScript toolchain.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

@@           Coverage Diff           @@
##             main      #11   +/-   ##
=======================================
  Coverage   92.56%   92.56%           
=======================================
  Files           6        6           
  Lines         269      269           
  Branches       79       79           
=======================================
  Hits          249      249           
  Misses          2        2           
  Partials       18       18           

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update a3fe55f...97dc873. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.