chore(main): release 2.0.1

[github-actions]

🤖 I have created a release beep boop

2.0.1 (2026-08-14)

Bug Fixes

• apply review fixes to the docs and tooling sweep (73b6b4a)
• apply review fixes to the harness audit batch (ceb9f46)
• apply review fixes to the src-side audit batch (b9de617)
• attest build provenance and attach the sigstore bundle to releases (b5db672)
• centralize the token-leak sweep in the runner (7dcc225)
• classify rate limits structurally on every path (65f97a2)
• correct mock identity minting and the pages resurrect bug (9152a91)
• cover every faultable section in the fuzz fault battery (e41aa99)
• derive owner-kind sensitivity from the section declaration (0181f01)
• discover schema-corpus scenarios across all scenario roots (d34d031)
• harden the CI tooling (6fb2603)
• keep spec-pinned gaps out of automatic graduation (ae278c9)
• parse live bodies through parseLive in the seven asserting sections (56ca3e4)
• reject required-sections entries excluded by the sections allowlist (c1fc169)
• single-tag releases - version tags live only on packaged commits (08d5585)
• size the harness kill cap for the directed fuzz battery (8543af8)
• strengthen the remaining per-section representations (3fc0f85)

---

This PR was generated with Release Please. See documentation.