chore(release): prepare GhostAPI 0.2.0

[yiaany]

Release

GhostAPI 0.2.0: Local SDK Compatibility and Release Evidence

Included

• locked official Stripe 22.6.0 and OpenAI 7.8.0 compatibility fixture
• Linux egress, package, coverage, CodeQL, OSV, and Scorecard evidence
• signed tag verification, SBOM, checksums, attestations, and npm provenance
• corrected pre-0.2 authorship disclosure and immutable 0.1.x npm history

Local verification

• npm run lint
• npm run typecheck
• npm test: 343 passed
• npm run test:coverage
• npm run build
• npm run smoke:package
• npm run test:sdk-compat

[github-actions]

GhostAPI PR safety

Result: success

The status check and sanitized evidence artifact are the source of truth. This comment is updated in place and contains no request traffic or secrets.