v0.7.0

[pHo9UBenaA]

v0.7.0

Replaces #30: that branch mixed breaking configuration changes into a patch release, so it ships here instead.

Breaking changes

• Stop automatically executing repository configuration. --config <path> selects a trusted .ts/.mjs/.js file; an existing executable config now produces a migration error (exit 2) without running it. --no-config still skips configuration and cannot be combined with --config.
• loadConfig(cwd) reads JSON instead of executing discovered code. Use loadConfig(cwd, { configPath: 'siro.config.mjs' }); the optional Node-version argument is now options.nodeVersion.

Migration: move data-only settings to siro.config.json, or pass --config <path> for code you trust.

Other changes

• Auto-load siro.config.json as data (built-in settings only), with precedence over a coexisting JS/TS config; invalid JSON fails without fallback.
• Reject unknown package-manager names, invalid binding maps, and async/nonboolean requireConfigKey predicates as configuration errors (exit 2).
• Ship the distribution unminified, so published stack traces match the reviewed sources.
• Simplify configuration and contributor documentation.

Explicitly selected synchronous custom policies, decoded JSON schema 3, Node requirements and inspection scope remain unchanged. See the changelog.

pnpm verify (963 passed, 1 skipped) and pnpm test:package passed at 391a418.

Closes #21
Closes #22
Closes #23
Closes #24