[codex] release TinyPM v1.2.0 project intelligence

[waternie]

What changed

• add evidence-driven weekly reports with immutable facts, review, approval, archive, and version history
• add incremental LLM Wiki ingestion, compilation worker, source traceability, and Obsidian export
• add external integration APIs protected by a dedicated API key
• add deterministic project risk alerts and an Agent get_project_risks MCP tool
• add Alembic migrations, isolated PostgreSQL tests, and Docker build improvements
• make the backend host port configurable while keeping 6100 as the default

Why

TinyPM v1.2.0 moves project analysis from chat-only summaries to traceable project facts, reusable knowledge, explainable warning rules, and controlled Agent actions.

Privacy and security

• real .env, uploads, project documents, temporary audit outputs, Python caches, and frontend build artifacts remain ignored
• staged files were scanned with Gitleaks 8.30.1 in redacted mode; no leaks were found
• repository examples contain placeholders or isolated test credentials only

Validation

• docker compose up -d --build --force-recreate
• backend health endpoint: HTTP 200
• frontend endpoint: HTTP 200
• isolated PostgreSQL test suite: 64 passed
• frontend production build completed successfully