Lataa CertKit 0.8.3

Changelog
- cee87c1 chore(release): cut v0.8.3 (#133)
- 8c57e9e Merge pull request #132 from sensiblebit/feat/connect-verbose-chain-metadata
- 95e4b39 fix(certstore): wrap wasm sqlite stub errors
- ebffca9 docs: refresh transport probe docs
- b5741be fix(certstore): stub sqlite persistence on wasm
- 3b16e56 feat(connect): show verbose chain PEM metadata
- ff9532a Merge pull request #131 from sensiblebit/feat/transport-probing
- 0a75991 fix(review): tighten STARTTLS result metadata
- dd5e6b6 fix(review): tighten helper and SSH parsing
- 58e8295 fix(review): tighten transport probe follow-ups
- 53e8904 fix(review): tighten probe review handling
- 42375c9 fix(review): clarify SSH and LDAP follow-ups
- 897dec4 fix(review): tighten transport review cleanup
- be024e3 fix(review): tighten transport policy follow-ups
- 602fcb2 fix(ssh): normalize SSH-1.99 protocol banner
- e9a0e71 docs(rules): add PR comment helper workflow
- d1956cc fix(review): tighten transport follow-ups
- 7b09a2d fix(review): tighten STARTTLS preflight checks
- 0611036 fix(review): tighten transport probe feedback
- eb9d00f fix(connect): label protocol-specific TLS upgrades
- 32236e3 fix(review): tighten transport probing edge cases
- babe06e fix(review): address transport probing feedback
- a97ef45 fix(cli): add probe ssh format flag
- 2ade505 fix(starttls): tighten preflight diagnostics
- 0adcb4d fix(ssh): send client kexinit before probing
- a5a6631 fix(review): tighten transport probe follow-ups
- be90192 fix(starttls): tolerate imap untagged prelude
- 86dbf71 docs: clarify shared SSH policy heuristics
- 3d2df2f fix(review): harden policy and SSH parsing
- 9aa5698 fix(review): tighten SSH and STARTTLS polish
- 4bf4f14 docs(rules): require PR docs audit agent
- 8078a64 docs: refresh examples and architecture
- 28235d1 fix(review): harden STARTTLS retry detection
- 3d5bf24 test(review): table-drive probe ssh output checks
- 4f09162 fix(review): harden STARTTLS preflight parsing
- 2f617f2 fix(review): tighten STARTTLS follow-ups
- 5ff59da docs(rules): require fresh PR comment snapshots
- d4cd6cb docs(rules): close stale agents before spawn
- 29c487c fix(review): harden transport protocol parsing
- 7d0c30c fix(review): tighten transport probe coverage
- dfffa29 ci: enable actionlint hook
- 4a7e3d5 refactor(ssh): use input structs in display helpers
- 9e2c203 docs(rules): require delegated review fixes
- 19e02e9 docs(rules): tighten push and PR workflow
- a4cb657 fix(review): tighten transport probe behavior
- 61d70cb docs(changelog): cover transport probe hardening
- 402e238 fix(review): harden transport probe edge cases
- a9da874 fix(review): tighten STARTTLS auto-detection
- a2cfd2e fix(review): simplify transport helper signatures
- 0727948 fix(review): handle additional STARTTLS cases
- 4e44313 fix(review): address transport probing feedback
- 8f548d1 feat(probe): add transport probing and STARTTLS support
- 13e9940 Merge pull request #130 from sensiblebit/chore/strict-golangci-lint
- 581ecd7 fix(scan): reuse symlink target stat for size checks
- 0e09bfa fix: address final review comments
- c652725 fix(quic): remove dead varint panic
- 902fbc7 fix(passwords): stream password files
- 96e60a6 chore(lint): add more useful golangci checks
- 07c7f50 fix: surface probe encoding failures
- e5e207c docs: allow stricter golangci repo config
- 9e2ef58 fix: restore sane output permissions
- 1cabcc5 fix: address review follow-ups
- 9bfc08b fix(probes): return errors on record length overflow
- 3eb9c52 fix(codeql): inline legacy sha1 compatibility paths
- 1863188 chore(lint): satisfy strict golangci config
- 51be9a6 chore(lint): reduce strict golangci baseline
- 2cf8db8 docs(go): add package comments
- bd1a270 chore(lint): enable strict golangci checks
- 066ad9f Merge pull request #129 from sensiblebit/fix/remove-wasm-file-cap
- 1281c5c fix(wasm): surface overflow warnings in inspect
- b5b7450 fix(wasm): keep scanning after total size overflow
- 3743603 fix(wasm): stop fan-out after total upload limit
- c68b53e docs(changelog): reference PR #129 for WASM cap removal
- a4cc8f5 fix(wasm): stop rejecting legitimate large folder drops