release: GraphKeeper 0.2.0

[anusbutt]

Outcome

Prepare GraphKeeper 0.2.0 for publication after the merged Codex and Claude agent-integration work.

This synchronizes the package, CLI, changelog, README, and release assertions. No runtime behavior beyond the already-merged integration feature is changed.

Evidence

Passing release-candidate gates on WSL Ubuntu:

• npm ci
• npm run release:verify (269 functional/security tests and package smoke)
• npm run test:performance (5/5)
• npm ls --all
• sh -n scripts/validate.sh
• sh -n templates/pre-commit
• git diff --check

The GitHub release branch tree was also compared byte-for-byte with the locally tested commit.

Checklist

• Tests cover valid, invalid, and relevant security or performance paths.
• Documentation and examples reflect every changed public behavior.
• Schema compatibility is unchanged.
• Constitution principles and append-only/evidence guarantees remain satisfied.
• npm run build passes through the package/release gate.
• npm run typecheck passes.
• npm test coverage passed for the merged feature; deterministic release suites pass on this candidate.
• npm run package:smoke passes and the tarball contains intended assets only.
• Shell syntax checks pass.
• No secrets, credentials, telemetry, generated archives, or unrelated edits are included.

Compatibility and recovery

Tested using the supported WSL Ubuntu/POSIX runtime with Node.js 18+ package constraints. This is a non-breaking minor release. If publication verification fails, stop without reusing the version; published npm versions are immutable, and recovery requires a follow-up patch version.