release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

The first formal release.

- One-click install via Pinokio; keyless boot lands on a live Esri World
  Imagery satellite globe with keyless terrain, with automatic OSM fallback
  and graceful degradation when terrain is unavailable.
- Provider Settings (the POWER UP panel): add, replace, or remove API keys
  inside the app; credential files made owner-only before any secret is
  written; external keys shown read-only; the panel refuses shared or proxied
  servers.
- Keyless capability responses for the optional HUD summary and place search.
- Aircraft-identity voice answers cover operator, type, and route, and say so
  plainly when enrichment is unavailable.
- README rewritten keyless-first; concise 0.1.0 changelog section; CI
  workflow included.

Gates: 2,672 unit tests pass / 0 fail, build clean, tracking regression
108/108, map-source tray QA pass, setup doctor ready.

TESTING.md

@@ -4,10 +4,10 @@
 > This is a **manual field-test scenario script** for the June-2026 whiteboard +
 > tracking work. The AUTOMATED gates live elsewhere: `npm test` (unit),
 > `npm run test:track` (tracking invariants), and the headless harnesses under
-> `scripts/qa-*.mjs` — see [docs/CURRENT-STATE.md](docs/CURRENT-STATE.md) for the full test surface.
+> `scripts/qa-*.mjs` — together these are the full automated test surface.
 
-This guide covers the hardened annotation and tracking behavior. Record a voice
-note + screenshots as you go; each scenario
+This guide covers the work hardened over **4 adversarial-review batches** on
+`feat/annotate-hybrid`. Record a voice note + screenshots as you go; each scenario
 lists what **✅ pass** looks like and (where it applies) the **❌ old bug** it replaces.
 
 ## Focus/horizon moving evidence